Merge pull request #8942 from taosdata/fix/TS-654-master

[TS-654]<fix>: fixed two crash bugs

src/plugins/http/src/httpServer.c

@@ -404,9 +404,13 @@ static bool httpReadData(HttpContext *pContext) {
         return true;
       }
     } else if (nread < 0) {
-      if (errno == EINTR || errno == EAGAIN || errno == EWOULDBLOCK) {
+      if (errno == EINTR) {
+        httpDebug("context:%p, fd:%d, read from socket error:%d, continue", pContext, pContext->fd, errno);
+        continue;
+      } else if (errno == EAGAIN || errno == EWOULDBLOCK) {
         httpDebug("context:%p, fd:%d, read from socket error:%d, wait another event", pContext, pContext->fd, errno);
-        continue;  // later again
+        httpReleaseContext(pContext/*, false */);
+        return false;
       } else {
         httpError("context:%p, fd:%d, read from socket error:%d, close connect", pContext, pContext->fd, errno);
         taosCloseSocket(pContext->fd);

src/rpc/src/rpcTcp.c

@@ -488,6 +488,12 @@ static int taosReadTcpData(SFdObj *pFdObj, SRecvInfo *pInfo) {
 
   msgLen = (int32_t)htonl((uint32_t)rpcHead.msgLen);
   int32_t size = msgLen + tsRpcOverhead;
+  // TODO: reason not found yet, workaround to avoid first
+  if (msgLen <= 0 || size < 0) {
+    tError("%s %p invalid size for malloc, msgLen:%d, size:%d", pThreadObj->label, pFdObj->thandle, msgLen, size);
+    return -1;
+  }
+
   buffer = malloc(size);
   if (NULL == buffer) {
     tError("%s %p TCP malloc(size:%d) fail", pThreadObj->label, pFdObj->thandle, msgLen);