Re: [PATCH 7/8] reconfiguration leaks: SSL ex_data

On 25/04/2014 9:02 p.m., Amos Jeffries wrote:
> On 25/04/2014 12:58 p.m., Alex Rousskov wrote:
>> Do not leak ex_data for SSL state that survived reconfigure.
>>
>> SSL_get_ex_new_index() allocates a new index on every call, even if its
>> parameters remain unchanged. It should be called once per process lifetime.
>>
>> Besides leaking, this 12 year-old(!) bug could probably make some SSL
>> code misbehave during reconfigure because reconfigure would change the
>> supposedly constant ex_data indexes.
>>
>> Alex.
>>
>
>
> +1.
>
> Amos
>

Applied as trunk rev.13434

Amos
Received on Mon Jun 02 2014 - 05:28:03 MDT