[QPID-2407] C++ SSL session can get bad buffer management

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.7
• Fix Version/s: 0.7
• Component/s: C++ Broker, C++ Client

Environment

Windows

• Assignee: Stephen D. Huston
• Reporter: Stephen D. Huston
• Created: 15/Feb/10 16:49
• Updated: 29/Jul/13 18:53
• Resolved: 15/Feb/10 21:29

Description

Thanks to Cliff Jansen for alerting me to this problem.

It's possible for an SSL-negotiated session on Windows to end up with odd errors or an exception. One session I caught in the debugger ended with a ENOBUFS errors on a network receive; the buffer involved ended up having a data-start greater than the length of the buffer, and the calculated receive length for the operation was a negative value.

Can be reproduced using perftest on Windows; I ran against a Linux broker, but similar results can probably happen in either direction depending on the traffic pattern.