Skip to content

Fix: check SSL_new fail#7569

Closed
mrpre wants to merge 1 commit intoredis:unstablefrom
mrpre:sslnewcheck
Closed

Fix: check SSL_new fail#7569
mrpre wants to merge 1 commit intoredis:unstablefrom
mrpre:sslnewcheck

Conversation

@mrpre
Copy link
Contributor

@mrpre mrpre commented Jul 27, 2020

To fix #7565

(1). Redis miss the return value check of SSL_new.

(2). It' disgusting for redis to check whether ssl is null if connCreateAcceptedxxx returns an allocated conn with null ssl item, so I just free the conn inside the the connCreateAcceptedxxx . May be we should add such api like connSuccess(xx) to check the connection.

(3). Since (2), I think the TLS will not be the only protocol to be used in the future which means connCreateAcceptedxxx is likely to return null and acceptCommonHandler should be protected.

more detail:

image

@yossigo
Copy link
Collaborator

yossigo commented Jul 27, 2020

@mrpre Thanks for this fix! The original #7565 ticket requires a more specific fix around configuration handling, but you outline here another issue which needs to be fixed.

@yossigo
Copy link
Collaborator

yossigo commented Jul 28, 2020

Fixed by #7576

@yossigo yossigo closed this Jul 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Redis 6.0.6 crash with SiGSEGV in SSL_set_fd at startup

2 participants