malformed JSON bypasses closed-state and normal teardown, so deferred bootstrap can still start work for a dead downstream
The receive loop returns early on invalid JSON in
src/translator/downstream/receive_from_downstream.rs before it reaches the
normal shutdown path that marks the downstream closed, removes stats, and sends
the task-manager kill signal. Because the deferred bootstrap path in
src/translator/downstream/notify.rs and the share-monitor startup in
src/translator/downstream/downstream.rs only check the per-downstream closed
flag, a malformed-JSON disconnect can leave is_closed == false and allow late
bootstrap work to proceed for a connection that is already dead.
malformed JSON bypasses closed-state and normal teardown, so deferred bootstrap can still start work for a dead downstream
The receive loop returns early on invalid JSON in
src/translator/downstream/receive_from_downstream.rs before it reaches the
normal shutdown path that marks the downstream closed, removes stats, and sends
the task-manager kill signal. Because the deferred bootstrap path in
src/translator/downstream/notify.rs and the share-monitor startup in
src/translator/downstream/downstream.rs only check the per-downstream closed
flag, a malformed-JSON disconnect can leave is_closed == false and allow late
bootstrap work to proceed for a connection that is already dead.