Closed Bug 2020613 Opened 18 days ago Closed 17 days ago

XmitBufLock leak in dtls13_MaybeSendKeyUpdate

Categories

(NSS :: Libraries, defect, P3)

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: mdauer, Assigned: jschanck)

Details

(Keywords: ai-involved)

Attachments

(1 file)

dtls13_MaybeSendKeyUpdate() in lib/ssl/dtls13con.c acquires XmitBufLock (line 820) but both error paths (lines 823, 830) return without releasing it, deadlocking subsequent sends.

ssl_GetXmitBufLock(ss);                          // acquired
rv = dtls13_EnqueueKeyUpdateMessage(ss, request);
if (rv != SECSuccess) {
    return rv;                                    // leaked
}
rv = ssl3_FlushHandshake(ss, 0);
if (rv != SECSuccess) {
    return SECFailure;                            // leaked
}
ssl_ReleaseXmitBufLock(ss);                       // success only
Keywords: ai-involved
Assignee: nobody → jschanck
Severity: -- → S3
Status: NEW → ASSIGNED
Priority: -- → P3

Pushed by jschanck@mozilla.com:
https://hg.mozilla.org/projects/nss/rev/f3d098e87b2d
release xmit buf lock on dtls13_MaybeSendKeyUpdate error paths. r=nkulatova

Status: ASSIGNED → RESOLVED
Closed: 17 days ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: