1 commit 0fc2d46fabb2b9317daf7030162e828c7e1684d5
2 Author: Christopher Faulet <cfaulet@haproxy.com>
3 Date: Thu Aug 1 10:09:29 2019 +0200
5 BUG/MEDIUM: lb-chash: Ensure the tree integrity when server weight is increased
7 When the server weight is increased in consistant hash, extra nodes have to be
8 allocated. So a realloc() is performed on the nodes array of the server. the
9 previous commit 962ea7732 ("BUG/MEDIUM: lb-chash: Remove all server's entries
10 before realloc() to re-insert them after") have fixed the size used during the
11 realloc() to avoid segfaults. But another bug remains. After the realloc(), the
12 memory area allocated for the nodes array may change, invalidating all node
13 addresses in the chash tree.
15 So, to fix the bug, we must remove all server's entries from the chash tree
16 before the realloc to insert all of them after, old nodes and new ones. The
17 insert will be automatically handled by the loop at the end of the function
18 chash_queue_dequeue_srv().
20 Note that if the call to realloc() failed, no new entries will be created for
21 the server, so the effective server weight will be unchanged.
23 This issue was reported on Github (#189).
25 This patch must be backported to all versions since the 1.6.
27 (cherry picked from commit 0a52c17f819a5b0a17718b605bdd990b9e2b58e6)
28 Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
30 diff --git a/src/lb_chash.c b/src/lb_chash.c
31 index 0bf4e81a..23448df8 100644
34 @@ -84,8 +84,13 @@ static inline void chash_queue_dequeue_srv(struct server *s)
35 * increased the weight beyond the original weight
37 if (s->lb_nodes_tot < s->next_eweight) {
38 - struct tree_occ *new_nodes = realloc(s->lb_nodes, s->next_eweight * sizeof(*new_nodes));
39 + struct tree_occ *new_nodes;
41 + /* First we need to remove all server's entries from its tree
42 + * because the realloc will change all nodes pointers */
43 + chash_dequeue_srv(s);
45 + new_nodes = realloc(s->lb_nodes, s->next_eweight * sizeof(*new_nodes));
49 @@ -494,7 +499,6 @@ void chash_init_server_tree(struct proxy *p)
50 srv->lb_nodes_tot = srv->uweight * BE_WEIGHT_SCALE;
51 srv->lb_nodes_now = 0;
52 srv->lb_nodes = calloc(srv->lb_nodes_tot, sizeof(struct tree_occ));
54 for (node = 0; node < srv->lb_nodes_tot; node++) {
55 srv->lb_nodes[node].server = srv;
56 srv->lb_nodes[node].node.key = full_hash(srv->puid * SRV_EWGHT_RANGE + node);