nodejs
diff --git a/‎src/quic/application.cc‎
Lines changed: 6 additions & 0 deletions b/‎src/quic/application.cc‎
Lines changed: 6 additions & 0 deletions
diff --git a/‎src/quic/session.cc‎
Lines changed: 2 additions & 2 deletions b/‎src/quic/session.cc‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎src/quic/streams.cc‎
Lines changed: 4 additions & 0 deletions b/‎src/quic/streams.cc‎
Lines changed: 4 additions & 0 deletions
diff --git a/‎src/quic/streams.h‎
Lines changed: 3 additions & 0 deletions b/‎src/quic/streams.h‎
Lines changed: 3 additions & 0 deletions
diff --git a/‎test/parallel/test-quic-stream-uni-no-onstream.mjs‎
Lines changed: 47 additions & 0 deletions b/‎test/parallel/test-quic-stream-uni-no-onstream.mjs‎
Lines changed: 47 additions & 0 deletions
@@ -761,6 +761,12 @@ class DefaultApplication final : public Session::Application {
         // during the onstream callback (via MakeCallback re-entrancy).
         return false;
       }
+
+      // The stream was created, but was immediately destroyed because there's
+      // no onstream handler.
+      if (stream->is_destroyed()) [[unlikely]] {
+        return true;
+      }
     } else {
       stream = BaseObjectPtr<Stream>(Stream::From(stream_user_data));
       if (!stream) {
 
@@ -860,11 +860,11 @@ struct Session::Impl final : public MemoryRetainer {
       }
     }
 
-    endpoint->RemoveSession(config_.scid, remote_address_);
-
     auto& binding = BindingData::Get(env());
     if (stats_slot_) GetSessionStatsArena(binding).ReleaseSlot(stats_slot_);
     if (state_slot_) GetSessionStateArena(binding).ReleaseSlot(state_slot_);
+
+    endpoint->RemoveSession(config_.scid, remote_address_);
   }
 
   void MemoryInfo(MemoryTracker* tracker) const override {
 
@@ -1325,6 +1325,10 @@ bool Stream::is_pending() const {
   return state()->pending;
 }
 
+bool Stream::is_destroyed() const {
+  return stats()->destroyed_at != 0;
+}
+
 stream_id Stream::id() const {
   return state()->id;
 }
 
@@ -267,6 +267,9 @@ class Stream final : public AsyncWrap,
   // to be created.
   bool is_pending() const;
 
+  // True if the stream is already destroyed.
+  bool is_destroyed() const;
+
   // True if we've completely sent all outbound data for this stream.
   // Importantly, this does not necessarily mean that we are completely
   // done with the outbound data. We may still be waiting on outbound
 
@@ -0,0 +1,47 @@
+// Flags: --experimental-quic --no-warnings
+// Test: client-initiated unidirectional stream with no onstream
+// The client creates a uni stream with no onstream.
+// Verify that this causes no crash.
+
+import { hasQuic, skip, mustCall } from '../common/index.mjs';
+import * as fixtures from '../common/fixtures.mjs';
+
+const { readKey } = fixtures;
+
+if (!hasQuic) {
+  skip('QUIC is not enabled');
+}
+
+const { createPrivateKey } = await import('node:crypto');
+const { listen, connect } = await import('../common/quic.mjs');
+
+const serverKey = createPrivateKey(readKey('agent1-key.pem'));
+const serverCert = readKey('agent1-cert.pem');
+
+const done = Promise.withResolvers();
+
+const serverEndpoint = await listen(mustCall(async (session) => {
+  await session.opened;
+  done.resolve();
+}), {
+  sni: { '*': { keys: [serverKey], certs: [serverCert] } },
+  alpn: ['repro'],
+});
+
+const clientSession = await connect(serverEndpoint.address, {
+  servername: 'localhost',
+  alpn: 'repro',
+  ca: serverCert,
+});
+
+await clientSession.opened;
+
+await clientSession.createUnidirectionalStream({
+  body: 'something something darkside',
+});
+
+await done.promise;
+
+await clientSession.close();
+
+await serverEndpoint.close();
Original file line number	Diff line number	Diff line change
`@@ -860,11 +860,11 @@ struct Session::Impl final : public MemoryRetainer {`
`860`	`860`	`}`
`861`	`861`	`}`
`862`	`862`
`863`		`- endpoint->RemoveSession(config_.scid, remote_address_);`
`864`		`-`
`865`	`863`	`auto& binding = BindingData::Get(env());`
`866`	`864`	`if (stats_slot_) GetSessionStatsArena(binding).ReleaseSlot(stats_slot_);`
`867`	`865`	`if (state_slot_) GetSessionStateArena(binding).ReleaseSlot(state_slot_);`
	`866`	`+`
	`867`	`+ endpoint->RemoveSession(config_.scid, remote_address_);`
`868`	`868`	`}`
`869`	`869`
`870`	`870`	`void MemoryInfo(MemoryTracker* tracker) const override {`
Original file line number	Diff line number	Diff line change
`@@ -1325,6 +1325,10 @@ bool Stream::is_pending() const {`
`1325`	`1325`	`return state()->pending;`
`1326`	`1326`	`}`
`1327`	`1327`
	`1328`	`+bool Stream::is_destroyed() const {`
	`1329`	`+ return stats()->destroyed_at != 0;`
	`1330`	`+}`
	`1331`	`+`
`1328`	`1332`	`stream_id Stream::id() const {`
`1329`	`1333`	`return state()->id;`
`1330`	`1334`	`}`