8335b1
# ./pullrev.sh 1553540
8335b1
8335b1
https://bugzilla.redhat.com/show_bug.cgi?id=1040447
8335b1
8335b1
http://svn.apache.org/viewvc?view=revision&revision=1553540
8335b1
8335b1
--- httpd-2.4.6/modules/proxy/mod_proxy_http.c
8335b1
+++ httpd-2.4.6/modules/proxy/mod_proxy_http.c
8335b1
@@ -710,7 +710,7 @@
8335b1
         force10 = 0;
8335b1
     }
8335b1
 
8335b1
-    header_brigade = apr_brigade_create(p, origin->bucket_alloc);
8335b1
+    header_brigade = apr_brigade_create(p, bucket_alloc);
8335b1
     rv = ap_proxy_create_hdrbrgd(p, header_brigade, r, p_conn,
8335b1
                                  worker, conf, uri, url, server_portstr,
8335b1
                                  &old_cl_val, &old_te_val);
8335b1
@@ -1813,6 +1813,10 @@
8335b1
         }
8335b1
     } while (interim_response && (interim_response < AP_MAX_INTERIM_RESPONSES));
8335b1
 
8335b1
+    /* We have to cleanup bb brigade, because buckets inserted to it could be
8335b1
+     * created from scpool and this pool can be freed before this brigade. */
8335b1
+    apr_brigade_cleanup(bb);
8335b1
+
8335b1
     /* See define of AP_MAX_INTERIM_RESPONSES for why */
8335b1
     if (interim_response >= AP_MAX_INTERIM_RESPONSES) {
8335b1
         return ap_proxyerror(r, HTTP_BAD_GATEWAY,