Skip to content

backport to 1.16: test: avoid use after free in oauth_integration_test (#14103)#14127

Merged
antoniovicente merged 1 commit intoenvoyproxy:release/v1.16from
cpakulski:rel1.16/14103
Nov 20, 2020
Merged

backport to 1.16: test: avoid use after free in oauth_integration_test (#14103)#14127
antoniovicente merged 1 commit intoenvoyproxy:release/v1.16from
cpakulski:rel1.16/14103

Conversation

@cpakulski
Copy link
Contributor

Commit Message:
test: fix use after free in oauth_integration_test

The client request stream can be deleted under the call stack of Envoy::IntegrationCodecClient::startRequest if the proxy replies quickly enough. Attempts to send an end stream on that request result in use-after-free on the client stream in cases where the client processed the full reply inside startRequest.
Additional Description:
Risk Level: n/a test-only
Testing: n/a
Docs Changes: n/a
Release Notes: n/a
Fixes #12960

The client request stream can be deleted under the call stack of Envoy::IntegrationCodecClient::startRequest if the proxy replies quickly enough. Attempts to send an end stream on that request result in use-after-free on the client stream in cases where the client processed the full reply inside startRequest.

Fixes envoyproxy#12960

Signed-off-by: Antonio Vicente <avd@google.com>
Signed-off-by: Christoph Pakulski <christoph@tetrate.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants