[openssl-dev] Openssl Memory Leak

Fri Nov 6 16:46:56 UTC 2015

Hai All,

We are hitting at critical Memory leaks in ssl3_get_client_certificate()
 where are not able to run calls in load. The backtrace of the leak is

 291 bytes in 97 blocks are indirectly lost in loss record 2,354 of 3,052
==31717==    at 0x4C28BED: malloc (in
/usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==31717==    by 0x516C4FE: default_malloc_ex (mem.c:79)
==31717==    by 0x516CBD5: CRYPTO_malloc (mem.c:342)
==31717==    by 0x5228977: c2i_ASN1_OBJECT (a_object.c:315)
==31717==    by 0x523B86B: asn1_ex_c2i (tasn_dec.c:874)
==31717==    by 0x523B6BE: asn1_d2i_ex_primitive (tasn_dec.c:831)
==31717==    by 0x5239DBD: ASN1_item_ex_d2i (tasn_dec.c:207)
==31717==    by 0x523B187: asn1_template_noexp_d2i (tasn_dec.c:691)
==31717==    by 0x523AD6D: asn1_template_ex_d2i (tasn_dec.c:579)
==31717==    by 0x523A815: ASN1_item_ex_d2i (tasn_dec.c:443)
==31717==    by 0x523B009: asn1_template_noexp_d2i (tasn_dec.c:663)
==31717==    by 0x523AC7C: asn1_template_ex_d2i (tasn_dec.c:555)
==31717==    by 0x523A815: ASN1_item_ex_d2i (tasn_dec.c:443)
==31717==    by 0x523B187: asn1_template_noexp_d2i (tasn_dec.c:691)
==31717==    by 0x523AD6D: asn1_template_ex_d2i (tasn_dec.c:579)
==31717==    by 0x523A815: ASN1_item_ex_d2i (tasn_dec.c:443)
==31717==    by 0x5239BAE: ASN1_item_d2i (tasn_dec.c:146)
==31717==    by 0x5232A80: d2i_X509 (x_x509.c:154)
==31717==    by 0x4E54775: ssl3_get_client_certificate (s3_srvr.c:3174)
==31717==    by 0x4E72D2E: dtls1_accept (d1_srvr.c:605)
==31717==    by 0x4E7A0DC: dtls1_read_bytes (d1_pkt.c:811)
==31717==    by 0x4E5F47C: ssl3_read_internal (s3_lib.c:4246)
==31717==    by 0x4E5F52B: ssl3_read (s3_lib.c:4270)
==31717==    by 0x4E81F87: SSL_read (ssl_lib.c:1021)

Can anyone let us know about the leaks and will SSL_FREE() will free the
above memory.

 Please help .

Regards
Satya
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20151106/c3a3b59e/attachment.html>