[PATCH 7/8] reconfiguration leaks: SSL ex_data

From: Alex Rousskov <rousskov_at_measurement-factory.com>
Date: Thu, 24 Apr 2014 18:58:17 -0600

Do not leak ex_data for SSL state that survived reconfigure.

SSL_get_ex_new_index() allocates a new index on every call, even if its
parameters remain unchanged. It should be called once per process lifetime.

Besides leaking, this 12 year-old(!) bug could probably make some SSL
code misbehave during reconfigure because reconfigure would change the
supposedly constant ex_data indexes.

Alex.

Received on Fri Apr 25 2014 - 00:58:37 MDT

This archive was generated by hypermail 2.2.0 : Fri Apr 25 2014 - 12:00:16 MDT