[openssl-dev] [openssl.org #3660] Memory leak in s_server.c

Matt Caswell via RT rt at openssl.org
Thu Jan 15 13:54:06 UTC 2015


On Thu Jan 15 14:25:54 2015, sidhpurwala.huzaifa at gmail.com wrote:
> Here is how to test it:
>
> openssl req -x509 -newkey rsa -keyout localhost.key -out localhost.crt
> -subj \
> /CN=localhost -nodes -batch -sha256
>
> valgrind --leak-check=full openssl s_server -key localhost.key -cert \
> localhost.crt -accept 4433
>
> ./poc.py
>
> Every run of poc.py causes 56 byte memory leak:
>
> ==11278== HEAP SUMMARY:
> ==11278== in use at exit: 910,716 bytes in 20,383 blocks
> ==11278== total heap usage: 37,712 allocs, 17,329 frees, 2,596,814
> bytes
> allocated
> ==11278==
> ==11278== 56 bytes in 1 blocks are definitely lost in loss record 658
> of 823

What version of OpenSSL/platform are you running? Is this with vanilla OpenSSL
source, or with OS pre-installed binaries?

I'm not seeing this. I've tried on 1.0.1 and 1.0.0.

Matt



More information about the openssl-dev mailing list