SSL_clear in dtls.cpp about media-server HOT 4 CLOSED

Thank you!

from media-server.

https://github.com/medooze/media-server/blob/master/src/dtls.cpp#L627
https://github.com/medooze/media-server/blob/master/src/dtls.cpp#L816

@murillo128
In my test case, there is a chance to call DTLSConnection::Read after this SSL_free(). DTLSConnection::Read function will use write_bio(related to dlts) which has been freed. I test with ASAN, so here can be crush.

I Check the dtls is null or not at the beginning of the DTLSConnection::Read. My test is based on version of last year, and I don't know this issue and change still be suitable.

Thank you!

from media-server.

umm.. i might overlooked it.

Bestis just don't do anything on shutdown and on the near future raise and event to the app so it can close it, what do you think?

from media-server.

I don't know much ssl, but I think you're right.

I will close this.

from media-server.