-
Notifications
You must be signed in to change notification settings - Fork 9.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Workaround for Conscrypt concurrency issue #6509
Comments
Yeah, good idea. Want to submit a PR? Otherwise we’ll do. Also I assume we should backport the fix to 3.12.x? |
I'll have a look, it'll be good for me :) Even if we mitigate it in |
This also worried me... #6521 Is OkHttp failing in a bad state when the underlying SSL layer sends runtime errors? |
Yeah good question. I think it's quite surprising that a runtime crash in the connection pool cleanup task could hang a call. |
Android issue 177450597 looks to be due to a concurrency issue in Conscrypt where two threads race to close an
SSLEngine
-basedSSLSocket
and access to the underlying BIO is unsynchronized.We already have a PR google/conscrypt#942 in-flight which addresses this, but realistically we're not going to get that onto the majority of Android 10 devices, so the bug is going to be around for some time, so maybe okhttp could consider quietly swallowing any NPE in
closeQuietly()
?The text was updated successfully, but these errors were encountered: