From 79f4110365fe85f4377c50f0893134a8d5e45575 Mon Sep 17 00:00:00 2001 From: Dirk Engling Date: Fri, 30 Oct 2026 01:00:52 +0100 Subject: Consolidate all tcp/http tear down into a single http_close function to prevent a rare UAF for expiring connections --- Makefile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'Makefile') diff --git a/Makefile b/Makefile index f79d6a6..3ce127e 100644 --- a/Makefile +++ b/Makefile @@ -128,7 +128,9 @@ check-sanitize: $(TESTBIN).sanitize # cannot reach. Built with the sanitizers on, so the tracker reports its own # memory errors and the harness turns those into failures. PYTHON?=python3 -FEATURES_integration=$(FEATURES) -DWANT_IP_FROM_QUERY_STRING -DWANT_ACCESSLIST_BLACK -DWANT_KEEPALIVE +# The client timeout is cut right down so that tests can reach the expiry +# sweep. tests/integration/test_expiry.py mirrors these two numbers. +FEATURES_integration=$(FEATURES) -DWANT_IP_FROM_QUERY_STRING -DWANT_ACCESSLIST_BLACK -DWANT_KEEPALIVE -DOT_CLIENT_TIMEOUT=5 -DOT_CLIENT_TIMEOUT_CHECKINTERVAL=1 CFLAGS_integration=$(CFLAGS) $(OPTS_debug) $(FEATURES_integration) -fsanitize=address,undefined -fno-omit-frame-pointer LDFLAGS_integration=$(LDFLAGS) -fsanitize=address,undefined -- cgit v1.3