[openssl-dev] [OpenSSL][1.0.2h] Memory leaks - CAPI engine to blame?

[Sergio NNX]

> Works for me with mingw 32-bit:
> 
> ALL OCSP TESTS SUCCESSFUL
> Test X509v3_check_*
> ../util/shlib_wrap.sh ./v3nametest
> ../util/shlib_wrap.sh ./heartbeat_test
> Test constant time utilites
> ../util/shlib_wrap.sh ./constant_time_test
> Testing constant time operations...
> ok (ran 1908 tests)
> test_verify_extra
> ../util/shlib_wrap.sh ./verify_extra_test
> PASS
> test_clienthello
> ../util/shlib_wrap.sh ./clienthellotest
> test_sslv2conftest
> ../util/shlib_wrap.sh ./sslv2conftest
> SSLv2 CONF Test number 0
> SSLv2 CONF Test number 1
> SSLv2 CONF test: PASSED
> make[1]: Leaving directory `/c/src/openssl-1.0.2h/test'
> OPENSSL_CONF=apps/openssl.cnf util/opensslwrap.sh version -a
> OpenSSL 1.0.2h-fips  3 May 2016
> built on: reproducible build, date unspecified
> platform: mingw
> options:  bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) idea(int) 
> blowfish(idx)
> compiler: gcc -I. -I.. -I../include  -DOPENSSL_THREADS -D_MT -DDSO_WIN32 
> -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -fomit-frame-pointer -O3 -march=i486 
> -Wall -DOPENSSL_BN_ASM_PART_WORDS -DOPENSSL
> _IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m 
> -I/usr/local/ssl/fips-2.0/include -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM 
> -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_ASM -DWHIRLPOOL_ASM
>   -DGHASH_ASM
> OPENSSLDIR: "/usr/local/ssl"
> 
> 


Thanks for your email.

Can I ask you to try one more time?

Can you build OpenSSL from source including the CAPI engine and then run the tests again?
Make sure the CAPI engine gets built (e.g. openssl engine command)
I suspect the memory leaks come from there!
I just built it again *without* this option 'enable-capieng' and the memory leaks are gone!

Are there any patches available?

Thanks again.

...
...
ALL OCSP TESTS SUCCESSFUL
Test X509v3_check_*
../util/shlib_wrap.sh ./v3nametest
../util/shlib_wrap.sh ./heartbeat_test
Test constant time utilites
../util/shlib_wrap.sh ./constant_time_test
Testing constant time operations...
ok (ran 1908 tests)
test_verify_extra
../util/shlib_wrap.sh ./verify_extra_test
PASS
test_clienthello
../util/shlib_wrap.sh ./clienthellotest
test_sslv2conftest
../util/shlib_wrap.sh ./sslv2conftest
SSLv2 CONF Test number 0
SSLv2 CONF Test number 1
SSLv2 CONF test: PASSED
make[1]: Leaving directory `/src/openssl-1.0.2h/test'
OPENSSL_CONF=apps/openssl.cnf util/opensslwrap.sh version -a
OpenSSL 1.0.2h-fips  3 May 2016
built on: reproducible build, date unspecified
platform: mingw
options:  bn(64,32) rc4(8x,mmx) des(ptr,risc1,16,long) idea(int) blowfish(idx)
compiler: /mingw/bin/gcc.exe -I. -I.. -I../include  -DZLIB -DOPENSSL_THREADS -D_
MT -DDSO_WIN32 -DL_ENDIAN -DWIN32_LEAN_AND_MEAN -DWINVER=0x0501 -D_WIN32_WINNT=0
x0501 -D_WIN32_IE=0x0501 -DPTW32_STATIC_LIB -O0 -pipe -mms-bitfields -fno-builti
n -march=i686 -mtune=i686 -fomit-frame-pointer -Wall -DOPENSSL_BN_ASM_PART_WORDS
 -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -I/mingw/includ
e -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DMD5_ASM -DRMD160_ASM -DAES_ASM -DVPAES_
ASM -DWHIRLPOOL_ASM -DGHASH_ASM
OPENSSLDIR: "C:/OpenSSL"

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160604/1856d468/attachment-0001.html>