HAProxy known bugs for version v1.3.1 (maintenance branch 1.3)

This version (1.3.1) is a release belonging to maintenance branch 1.3 whose latest version is 1.3.28. If your version is not the last one in the maintenance branch, you are missing fixes for known bugs, and by not updating you are needlessly taking the responsibility for the risk of unexpected service outages and exposing your web site to possible security issues.

The HAProxy development team takes a great care of maintaining stable versions so that all users can apply bug fixes without having to take the risk of upgrading to a new branch. In turn users are expected to apply the fixes when the development team estimates that they were worth being backported to stable branches.

Quick links

Other versions in the same branch

This branch contains the following releases :

DateVersionComment
2016-03-141.3.28 ⇐ last
2015-02-011.3.27 
2011-08-051.3.26 
2010-06-161.3.25 
2010-03-301.3.24 
2010-01-281.3.23 
2009-10-141.3.22 
2009-10-121.3.21 
2009-08-091.3.20 
2009-07-271.3.19 
2009-05-101.3.18 
2009-03-291.3.17 
2009-03-221.3.16 
2008-04-191.3.15 
2007-12-061.3.14 
2007-10-181.3.13 
2007-06-171.3.12 
2007-06-031.3.11.4 
2007-05-141.3.11.3 
2007-05-141.3.11.2 
2007-05-141.3.11.1 
2007-05-141.3.11 
2007-05-101.3.10.2 
2007-05-091.3.10.1 
2007-05-091.3.10 
2007-04-161.3.9 
2007-04-031.3.8.2 
2007-04-011.3.8.1 
2007-03-261.3.8 
2007-01-261.3.7 
2007-01-221.3.6.1 
2007-01-221.3.6 
2007-01-071.3.5 
2007-01-021.3.4 
2006-10-161.3.3 
2006-09-031.3.2 
2006-07-091.3.1 ⇐ yours
2006-07-031.3.0 

Known bugs affecting this version, and already fixed in the maintenance branch

These fixes have already been queued for a more recent 1.3 version. Some of them might have already been released in a more recent version than yours, and other ones might still be pending in the maintenance branch for a future release. The list may be empty if you're already on the latest version and no new fix was backported.

Bugs are almost always tagged with a severity (some people forget the severity tag when the bug is minor). The following severities are used :

Total known bugs in this version by category :

TotalCRITICALMAJORMEDIUMMINOR
201 0 0 7 194

Click on the subjects below to get the full description of the bug :

Merge dateSubject - Severity (minor, medium, major, critical)
2016-03-14BUG/MINOR: acl: don't use record layer in req_ssl_ver
2016-03-14BUG/MEDIUM: config: count memory limits on 64 bits, not 32
2015-10-27BUG/MINOR: http: Add OPTIONS in supported http methods (found by find_http_meth)
2015-10-27BUG/MINOR: http: remove stupid HTTP_METH_NONE entry
2015-02-01BUG/MINOR: http: abort request processing on filter failure
2015-02-01BUG/MINOR: config: don't inherit the default balance algorithm in frontends
2015-02-01BUG/MEDIUM: tcp: don't use SO_ORIGINAL_DST on non-AF_INET sockets
2015-02-01BUG/MEDIUM: regex: fix risk of buffer overrun in exp_replace()
2015-02-01BUG/MEDIUM: signal: signal handler does not properly check for signal bounds
2015-02-01BUG/MINOR: config: fix improper check for failed memory alloc in ACL parser
2015-02-01BUG/MINOR: epoll: correctly disable FD polling in fd_rem()
2015-02-01BUG/MINOR: tarpit: fix condition to return the HTTP 500 message
2015-02-01BUG/MEDIUM: balance source did not properly hash IPv6 addresses
2015-02-01BUG: proto_tcp: set AF_INET on tproxy for use with recent kernels
2015-02-01[BUG] tcp: dropped connections must be counted as "denied" not "failed"
2013-07-04BUG/MEDIUM: http: "option checkcache" fails with the no-cache header
2012-01-20BUG/MEDIUM: zero-weight servers must not dequeue requests from the backend
2011-08-05[BUG] halog: correctly handle truncated last line
2011-04-08[BUG] http: balance url_param did not work with first parameters on POST
2011-04-08[BUG] startup: set the rlimits before binding ports, not after.
2011-04-08[BUG] cfgparse: correctly count one socket per port in ranges
2011-04-08[BUG] session: release slot before processing pending connections
2011-04-08[BUG] http: correctly update the header list when removing two consecutive headers
2011-04-08[BUG] appsession: fix possible double free in case of out of memory
2011-04-08[BUG] capture: do not capture a cookie if there is no memory left
2011-04-08[BUG] config: report the correct proxy type in tcp-request errors
2011-04-08[BUG] cookie: correctly unset default cookie parameters
2011-04-08[BUG] checks: don't log backend down for all zero-weight servers
2011-04-06[BUG] http: don't consider commas as a header delimitor within quotes
2011-04-06[BUG] queue: don't dequeue proxy-global requests on disabled servers
2010-09-21[BUG] stream_sock: cleanly disable the listener in case of resource shortage
2010-06-16[BUG] config: disable "option forceclose" in non-http instances
2010-06-16[BUG] frontend: always ensure to zero rep->analysers
2010-06-16[BUG] proxy: connection rate limiting was eating lots of CPU
2010-06-16[BUG] cttproxy: socket fd leakage in check_cttproxy_version
2010-06-16[BUG] client: don't add a new session to the list too early
2010-04-07[BUG] appsession should match the whole cookie name
2010-03-29[BUG] init: unconditionally catch SIGPIPE
2010-03-14[BUG] stats: don't abort if the client closes before the response
2010-03-12[BUG] url_param hash may return a down server
2010-03-08[BUG] Clear-cookie path issue
2010-03-08[BUG] logs: don't report "last data" when we have just closed after an error
2010-03-08[BUG] config: report unresolvable host names as errors
2010-03-08[BUG] config: reset check request to avoid double free when switching to ssl
2010-03-08[BUG] http: switch to tunnel mode after status 101 responses
2010-01-28[BUG] check: we must not check for error before reading a response
2010-01-28[BUG] appsession: possible memory leak in case of out of memory condition
2010-01-28[BUG] http: fix cookie parser to support spaces and commas in values
2010-01-28[BUG] check_post: limit analysis to the buffer length
2010-01-28[BUG] config: fix erroneous check on cookie domain names, again
2010-01-28[BUG] halog: fix segfault in case of empty log in PCT mode
2009-12-06[BUG] Configuration parser bug when escaping characters
2009-12-06[BUG] config: fix error message when config file is not found
2009-12-06[BUG] x-original-to: name was not set in default instance
2009-12-03[BUG] config: cookie domain was ignored in defaults sections
2009-12-03[BUG] config: fix erroneous check on cookie domain names
2009-11-09[BUG] config: disable 'option httplog' on TCP proxies
2009-11-09[BUG] config: fix wrong handling of too large argument count
2009-10-14[BUG] unix socket: don't try to dereference frontend/backends
2009-10-12[BUG] task.c: don't assing last_timer to node-less entries
2009-10-04[BUG] don't refresh timeouts late after detected activity
2009-10-03[BUG] check if rise/fall has an argument and it is > 0
2009-10-03[BUG] buffer_forward() would not correctly consider data already scheduled
2009-08-09[BUG] log: option tcplog would log to global if no logger was defined
2009-08-09[BUG] task: fix possible crash when some timeouts are not configured
2009-07-27[BUG] fix random pauses on last segment of a series
2009-07-14[BUG] task: fix possible timer drift after update
2009-07-14[BUG] config: tcp-request content only accepts "if" or "unless"
2009-07-14[BUG] stream_sock: don't stop reading when the poller reports an error
2009-07-14[BUG] stream_sock: always shutdown(SHUT_WR) before closing
2009-07-14[BUG] default ACLs did not properly set the ->requires flag
2009-07-14[CLEANUP] remove unused DEBUG_PARSE_NO_SPEEDUP define
2009-07-14[BUG] http: redirect rules were processed too early
2009-07-14[BUG] ensure that we correctly re-start old process in case of error
2009-05-10[BUG] fix parser crash on unconditional tcp content rules
2009-05-10[BUG] O(1) pollers should check their FD before closing it
2009-05-08[BUG] x-original-to: fix missing initialization to default value
2009-05-01[BUG] fix wrong pointer arithmetics in HTTP message captures
2009-04-07[BUG] stats: total and lbtot are unsigned
2009-03-29[BUG] don't set an expiration date directly from now_ms
2009-03-29[BUG] stream_sock: check for shut{r,w} before refreshing some timeouts
2009-03-28[BUG] stream_sock: disable I/O on fds reporting an error
2009-03-28[BUG] don't call epoll_ctl() on closed sockets
2009-03-28[BUG] reject unix accepts when connection limit is reached
2009-03-28[BUG] reset the stream_interface connect timeout upon connect or error
2009-03-21[BUG] check for global.maxconn before doing accept()
2009-03-21[BUG] server check intervals must not be null
2009-03-21[BUG] scheduler: fix improper handling of duplicates __task_queue()
2009-03-21[BUG] sched: don't leave 3 lasts tasks unprocessed when niced tasks are present
2009-03-15[BUG] session: errors were not reported in termination flags in TCP mode
2009-03-15[BUG] connect timeout is in the stream interface, not the buffer
2009-03-09[BUG] stream_sock: write timeout must be updated when forwarding !
2009-03-08[BUG] event_accept() must always wake the task up, even in health mode
2009-03-08[BUG] task: fix handling of duplicate keys
2009-03-07[BUG] rate-limit in defaults section was ignored
2009-03-06[BUG] disable any analysers for monitoring requests
2009-03-06[BUG] switch server-side stream interface to close in case of abort
2009-03-06[BUG] typo in timeout error reporting : report *res and not *err
2009-03-06[BUG] interface binding: length must include the trailing zero
2009-03-05[BUG] the "connslots" keyword was matched as "connlots"
2009-03-01[BUG] global.tune.maxaccept must be limited even in mono-process mode
2009-03-01[BUG] the "source" keyword must first clear optional settings
2009-02-22[BUG] fix unix socket processing of interrupted output
2009-02-22[BUG] fix random memory corruption using "show sess"
2009-02-04[BUILD] Haproxy won't compile if DEBUG_FULL is defined
2009-02-04[BUG] inform the user when root is expected but not set
2009-02-04[BUG] we must not exit if protocol binding only returns a warning
2009-01-27[BUG] Fix listen & more of 2 couples :
2009-01-25[BUG] reserve some pipes for backends with splice enabled
2008-12-23[BUG] "option transparent" is for backend, not frontend !
2008-12-23[BUG] check timeout must not be changed if timeout.check is not set
2008-12-07[BUG] do not dequeue the backend's pending connections on a dead server
2008-12-07[BUG] do not dequeue requests on a dead server
2008-12-07[BUG] critical errors should be reported even in daemon mode
2008-12-07[BUG] cookie capture is declared in the frontend but checked on the backend
2008-12-07[BUG] acl-related keywords are not allowed in defaults sections
2008-12-07[BUG] ensure that listeners from disabled proxies are correctly unbound.
2008-12-07[BUG] do not try to pause backends during reload
2008-12-07[BUG] dynamic connection throttling could return a max of zero conns
2008-12-07[BUG] do not release the connection slot during a retry
2008-12-07[BUG] do not forward close from cons to prod with analysers
2008-12-01[BUG] fix forgotten server session counter
2008-11-23[BUG] shutw must imply close during a connect
2008-08-26[BUG] fix harmless but wrong fd insertion sequence
2008-08-26[BUG] Fix empty X-Forwarded-For header name when set in defaults section
2008-08-17[BUG] process_request: HTTP body analysis must return zero if missing data
2008-08-17[BUG] process_cli/process_srv: don't call shutdown when already done
2008-08-17[BUG] regparm is broken on gcc < 3
2008-08-16[BUG] maintain_proxies must not disable backends
2008-08-16[BUG] process_response: do not touch srv_state
2008-08-16[BUG] buffers: remove BF_MAY_CONNECT and fix forwarding issue
2008-08-16[BUG] process_response must not enable the read FD
2008-08-16[BUG] ev_sepoll: closed file descriptors could persist in the spec list
2008-08-14[BUG] fix recently introduced loop when client closes early
2008-08-13[PATCH] appsessions: cleanup DEBUG_HASH and initialize request_counter
2008-08-11[BUG] client timeout incorrectly rearmed while waiting for server
2008-08-11[BUG] server timeout was not considered in some circumstances
2008-08-11[BUG] fix segfault with url_param + check_post
2008-07-09[BUG] use_backend would not correctly consider "unless"
2008-06-29[BUG] disable buffer read timeout when reading stats
2008-06-29[BUG] wqueue: perform proper timeout comparisons with wrapping values
2008-06-24[BUG] we could segfault during exit while freeing uri_auths
2008-06-20[BUG] fix the dequeuing logic to ensure that all requests get served
2008-06-20[BUG] log: reported queue position was offed-by-one
2008-06-20[BUG] queue management: wake oldest request in queues
2008-06-20[BUG] event pollers must not wait if a task exists in the run queue
2008-06-20[DEBUG] add a TRACE macro to facilitate runtime data extraction
2008-05-30[BUG/CLEANUP] cookiedomain -> cookie_domain rename + free(p->cookie_domain)
2008-04-21[BUG] Flush buffers also where there are exactly 0 bytes left
2008-03-28[BUG] fix double-decrement of server connections
2008-03-08[BUG] option allbackups was not working anymore in roundrobin mode
2008-03-07[BUG] str2sun could leak a small buffer in case of error during parsing
2008-03-04[BUG] Don't increment server connections too much + fix retries
2008-02-17[BUG] do not apply timeout.connect in checks if unset
2008-02-17[BUG] appsession lookup in URL does not work
2008-02-15[BUG] timeout.check was not pre-set to eternity
2008-02-15[BUG] failed conns were sometimes incremented in the frontend!
2008-01-22[BUG]: Restore clearing t->logs.bytes
2008-01-18[BUG] fix truncated responses with sepoll
2008-01-18[BUG] log response byte count, not request
2008-01-14[BUG] build failed on CONFIG_HAP_LINUX_TPROXY without CONFIG_HAP_CTTPROXY
2008-01-13[BUG] fix overlapping server flags
2008-01-13[BUG] use backend's source and not server's source with tproxy
2008-01-12[BUG] connect_server: server might not exist when sending error report
2008-01-06[BUG] fix typo in redispatched connection
2008-01-06[BUG] increment server connections for each connect()
2007-12-20[BUG] hot reconfiguration failed because of a wrong error check
2007-12-14[BUG] transparent proxy address was ignored in backend
2007-12-03[BUG] slowstart is in ms, not seconds
2007-11-26[BUG] fix missing parenthesis in check_response_for_cacheability
2007-11-26[BUG] missing header names in raw stats output
2007-11-26[BUG] relative_pid was not initialized
2007-10-25[BUG] fix calls to localtime()
2007-10-25[BUG] fix error checking in strl2ic/strl2uic()
2007-10-18[BUG] scope "." must match the backend and not the frontend
2007-10-18[BUG] fix off-by-one in path length in destroy_uxst_socket()
2007-10-16[BUG] remove condition for exit() under fork() failure
2007-10-16[BUG] fix wrong timeout computation in event_accept()
2007-10-15[BUG] fix segfault on exit in new appsession code
2007-10-15[BUG] fix double-free during clean exit
2007-06-17[BUG] str2net() must not change the const char *
2007-06-16[BUG] fix segfault at exit when using captures
2007-06-16[BUG] negation in ACL conds was not cleared between terms
2007-06-03[BUG] the epoll FD must not be shared between processes
2007-06-03[BUG] do not re-arm read timeout after writing data
2007-06-03[BUG] do not re-arm read timeout in SHUTR state !
2007-05-14[BUG] pre-initialize timeouts with tv_eternity during parsing
2007-05-14[BUG] fix broken health-checks since switch to timeval
2007-05-14[BUG] ev_kqueue was forgotten during the switch to timeval
2007-05-14[BUG] fix buggy timeout computation in wake_expired_tasks
2007-05-14[BUG] fix null timeouts in *poll-based pollers
2007-05-13[BUG] fix ev_sepoll again, this time with a new state machine
2007-05-09[BUG] two missing states in sepoll transition matrix
2007-05-08[BUG] fix early server close after client close
2007-04-30[BUG] fixed connection establishment detection
2007-04-03[BUG] initialize msg->sol before parsing first line
2007-04-03[BUG] Status line in HTTP response could not be rewritten
2007-03-30[BUG] fix reqadd when no option httpclose is used.
2007-03-19[BUG] fix pointer initializations for TCP connections.
2007-02-02[BUG] fix crash when no cookie is set on server
2007-02-01[BUG] segfault on some erroneous configurations
2007-01-25[BUG] hdr_idx might be left uninitialized in some cases
2007-01-21[BUG] last backend change broke server assignment
2006-12-04[BUG] files were missing for hdr_idx in previous commit
2006-12-02[BUG] implemented support for multi-line headers as required by RFC2616.

Back to the list of branches and versions
Back to the HAProxy page