On Tue, Jul 12, 2016 at 02:55:58PM -0700, Roberto Guimaraes wrote: > I will certainly pick Remi???s fix, thanks! > > Did you have any issues with haproxy 1.5 by chance?
No, we didn't backport the fix. The older the branch, the more critical the fixes need to be in order to be backported. > This has been running in prod (multiple boxes) for over a month without a > single issue. And your example config doesn???t cause any problems either. * > also using openssl 1.0.2h Interesting. > hmm wouldn???t valgrind itself detect an use after free? It should, but you know, I really don't trust valgrind. The problem is that it sees certain things and people tend to trust it too much and can sometimes introduce some breakage to make it happy. Also here I'm tempted to think that it's a double free issue. > I guess it doesn???t matter as it???s safer to just revert it. Yep. Willy
