tree 997f65ddc5a791b854bb5cce52cbb43402aa7556
parent adc69f3ee2d6a5e431d13f62e86d7c887157c3e3
author QUICHE team <quiche-dev@google.com> 1652209729 -0700
committer Copybara-Service <copybara-worker@google.com> 1652209772 -0700

Fix a race condition in QUIC TLS ticket processing

QUIC's TlsServerHandshaker class holds a non-owning pointer to a DecryptCallback object.  When shutting down, the handshaker makes a call through this non-owning pointer, which can race with other code which may be simultaneously deleting the callback, resulting in a use-after-free crash.

This CL solves the problem by switching to shared ownership of the callback.  This change is difficult to regression-test - the problem was uncovered by some in-progress changes to the LetoClient class which are not ready for review yet.

Protected by Trivial change, not protected.

PiperOrigin-RevId: 447795102