[UNDERTOW-2252] Potential fix for the SslConduit.dataToUnwrap buffer …

…leak Signed-off-by: Flavia Rainone <frainone@redhat.com>
undertow-io · Mar 26, 2023 · d5a8688 · d5a8688
1 parent fd35c8f
commit d5a8688
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/core/src/main/java/io/undertow/protocols/ssl/SslConduit.java b/core/src/main/java/io/undertow/protocols/ssl/SslConduit.java
@@ -1276,14 +1276,16 @@ public void readReady() {
             }
             if(anyAreSet(state, FLAG_READS_RESUMED) && (unwrappedData != null || anyAreSet(state, FLAG_DATA_TO_UNWRAP))) {
                 if(anyAreSet(state, FLAG_READ_CLOSED)) {
-                    if(unwrappedData != null) {
-                        unwrappedData.close();
-                    }
-                    if(dataToUnwrap != null) {
-                        dataToUnwrap.close();
+                    synchronized (SslConduit.this) {
+                        if (unwrappedData != null) {
+                            unwrappedData.close();
+                        }
+                        if (dataToUnwrap != null) {
+                            dataToUnwrap.close();
+                        }
+                        unwrappedData = null;
+                        dataToUnwrap = null;
                     }
-                    unwrappedData = null;
-                    dataToUnwrap = null;
                 } else {
                     //there is data in the buffers so we do a wakeup
                     //as we may not get an actual read notification