openssl/test/quic_memfail_test.c, branch dependabot/github_actions/actions/setup-python-7

quic: Add MFAIL coverage for stream map allocation and token caching

2026-06-10T11:23:29Z

Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman MergeDate: Wed Jun 10 11:23:38 2026 (Merged from https://github.com/openssl/openssl/pull/31333)

quic: make ch_cleanup() idempotent and simplify channel error path

2026-05-28T07:26:13Z

ch_init() calls ch_cleanup() on its own failure, after which port_make_channel() may still call ossl_quic_channel_free() (which calls ch_cleanup() again). The second call double-freed fields such as ch->qlog_title. To handle this, ch_cleanup() now NULLs every owned pointer after its free and clears the have_statm / have_qsm flags after their destructors, making it safe to invoke twice on the same channel. With ch_cleanup() idempotent, port_make_channel() no longer needs the ch_cleaned flag and the bare OPENSSL_free(ch) branch: the error path unconditionally calls ossl_quic_channel_free() regardless of whether ch_init() succeeded, partially initialized the channel, or already ran ch_cleanup() on itself. Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Norbert Pocs MergeDate: Thu May 28 07:26:22 2026 (Merged from https://github.com/openssl/openssl/pull/31177)

quic: fix incoming port cleanup on failure

2026-05-12T12:00:59Z

port_make_channel() builds an incoming QUIC channel in stages: allocate the channel, create the user SSL and inner TLS objects, optionally copy qlog state, then initialise the channel. Under the mfail allocator, failures in the middle of that sequence could leave ownership split between the partially-created channel and the user SSL, leaking allocations from ossl_quic_channel_alloc(). Make port_new_handshake_layer() return the created user SSL to port_make_channel() and detach the borrowed channel before cleaning up its own failures. port_make_channel() now owns the error path: it detaches any created user SSL from the channel, frees the channel exactly once according to whether channel initialisation already ran cleanup, and then frees the user SSL. Also make QUIC stream map cleanup tolerate a NULL map during partial channel cleanup, and add a focused mfail regression test for ossl_quic_port_create_incoming(). Fixes: https://github.com/openssl/openssl/issues/31014 Signed-off-by: Nikola Pajkovsky Reviewed-by: Saša Nedvědický Reviewed-by: Matt Caswell Reviewed-by: Neil Horman MergeDate: Tue May 12 12:01:04 2026 (Merged from https://github.com/openssl/openssl/pull/31038)