[openssl-dev] [openssl.org #4007] Segmantation fault in OpenSSL 1.0.2a

Vivekanandhan Subramanian via RT rt at openssl.org
Fri Aug 14 16:09:40 UTC 2015


Hi,

I am using OpenSSL 1.0.2a in our product in which I have come across segmentation fault while trying to de-initialize OpenSSL.
This issue has been reproduced in Windows, Mac and Android OS. From my basic analysis I've found that crash happens in BIO_Free() function.
While comparing the code with OpenSSL 1.0.1e, following difference was found. Crash was not happening after reverting below change to v1.0.1e.

Kindly let me know if there is any limitation in using the below change.

v1.0.2a:
if ((a->method != NULL) && (a->method->destroy != NULL))
        a->method->destroy(a);

v1.0.1e:
    if ((a->method == NULL) || (a->method->destroy == NULL))
                                return 1;
        a->method->destroy(a);

Regards,
Vivek

"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."

-------------- next part --------------
_______________________________________________
openssl-bugs-mod mailing list
openssl-bugs-mod at openssl.org
https://mta.openssl.org/mailman/listinfo/openssl-bugs-mod


More information about the openssl-dev mailing list