Skip to content

ngtcp2: avoid NULL deref in cf_ngtcp2_send - #22698

Closed
bagder wants to merge 1 commit into
masterfrom
bagder/ngtcp2-stream
Closed

bagder wants to merge 1 commit into
masterfrom
bagder/ngtcp2-stream

Conversation

@bagder

@bagder bagder commented Aug 27, 2026

Copy link
Copy Markdown
Member

In disable-verbose builds

Pointed out by Codex Security

In disable-verbose builds

Pointed out by Codex Security
@bagder bagder added the HTTP/3 h3 or quic related label Aug 27, 2026
@bagder
bagder requested review from icing and a lite review from Copilot August 27, 2026 06:08

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Fixes a potential NULL dereference in the ngtcp2 HTTP/3 send path when building with CURL_DISABLE_VERBOSE_STRINGS (disable-verbose builds), where VERBOSE(...) compiles to a no-op and previously skipped an essential stream-context assignment.

Changes:

  • Remove VERBOSE(...) wrapping from stream = H3_STREAM_CTX(ctx, data); so the assignment always executes after successfully opening a stream.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@bagder
bagder marked this pull request as ready for review August 27, 2026 06:11
@bagder bagder closed this in caff91b Aug 27, 2026
@bagder
bagder deleted the bagder/ngtcp2-stream branch August 27, 2026 07:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

HTTP/3 h3 or quic related

Development

Successfully merging this pull request may close these issues.

3 participants