Re: [openssl-dev] [openssl.org #4704] Memory leak in rsa_new/rsa_free

2016-10-17 Thread Martin Simmons
I think your problem (and the stack overflow) is caused by using "CALLBACK" in the 3 function typedefs. Try using __cdecl instead of CALLBACK. __Martin > On Tue, 11 Oct 2016 16:15:24 +, Simone Sgualdini via RT said: > > > Hi, > > > I'm writing a c++ server application that calls

Re: need help to debug SIGSEGV in ssl3_get_message

2014-09-25 Thread Martin Simmons
On Thu, 25 Sep 2014 11:24:36 +0200, Michael Menge said: Quoting Andy Polyakov ap...@openssl.org: in that case it crashes here: if (s-msg_callback) s-msg_callback(0, s-version, SSL3_RT_HANDSHAKE, s-init_buf-data, (size_t)s-init_num + 4, s,

Re: OpenSSL-1.0.0m on Fedora Core 16

2014-06-24 Thread Martin Simmons
In my experience, the best way to build your own rpm is to install the old version's src rpm from your Linux distribution, copy the new source tar file into the rpmbuild SOURCES directory and edit the spec file to use it. Also change the package version numbers in the spec file and review any

Re: seems openssl version 1.0.1g also infected

2014-04-14 Thread Martin Simmons
Why are building your own openssl? Did you try the official Ubuntu update? sudo apt-get update sudo apt-get upgrade __Martin On Mon, 14 Apr 2014 16:59:06 +0530, LOKESH JANGIR said: Hi, I am installing openssl in /usr/local/openssl folder and it is creating libssl.a and libcrypt.a

Re: RAND_poll() and CreateToolhelp32Snapshot() stability

2009-03-05 Thread Martin Simmons
On Wed, 04 Mar 2009 21:40:52 +, Tanguy Fautré said: We've figured the try/except modification was safe for the following reasons. - The traversal is read-only. Trapping an access violation/segfault in this case is safe (i.e. we do not modify an unknown memory location). - The

Re: RAND_poll() and CreateToolhelp32Snapshot() stability

2009-03-03 Thread Martin Simmons
On Mon, 02 Mar 2009 16:56:39 +, Tanguy Fautré said: We also suspected that the crashes could be caused by heap corruption done by our application. In order to disprove this, we enabled full CRT checks on memory allocation/deallocations; no error came up. On top of that, MSDN

Re: Last portion SSL_read only after a SSL_write . Please Help.

2008-08-01 Thread Martin Simmons
On Fri, 1 Aug 2008 08:26:55 +0200, Ger Hobbelt said: I'm glad this works for you, but be warned: the fact that that cute hack works in your environment now will not guarantee it will work elsewhere. The fact that you need to transmit another few ('faked') bytes to get the data you want is a

Re: 0.9.9 SNAP OSX .dylib link problem

2008-03-19 Thread Martin Simmons
On Wed, 19 Mar 2008 00:12:56 -0700, Larry Bugbee said: Hi, I'm building 0.9.9 from the latest SNAP and have been successful with openssl (the app) but no joy with building .dylib files on MacOSX. The linker fails with: ld: absolute addressing (perhaps -mdynamic-no-pic) used in

Re: memory corruption after usin BN_mod_inverse

2008-01-31 Thread Martin Simmons
Hi, Yair Elharrar! For me it looks bad. :-/ Because, BN_sub doesn't handle this situation (r = b): 1) BN_sub call BN_uadd(r,a,b), but r = b, then 2) BN_sub change r-neg, but r = b, then 3) BN_sub call BN_expand(r), then 4) BN_sub call BN_ucmp(a,b), but b here is not that b that was

Re: OpenSSL error information queue

2007-12-18 Thread Martin Simmons
On Tue, 18 Dec 2007 09:15:42 +0100, Jurko Gospodnetić said: Hi Martin. Thank you for replying. Yes, sometimes there is nothing on the error queue after SSL_get_error() has returned SSL_ERROR_SYSCALL. That's what I assumed. Also, if your app is multithreaded then don't

Re: OpenSSL error information queue

2007-12-17 Thread Martin Simmons
On Wed, 12 Dec 2007 21:22:50 +0100, Jurko Gospodnetiæ said: Hi. Could someone more knowledgeable with OpenSSL please explain to me exactly how the OpenSSL error information queue (accessed using ERR_get_error(), SSL_get_error() and related APIs) is supposed to be used. Is

Re: Windows build of FIPS 1.1.1 is not thread-safe

2007-08-10 Thread Martin Simmons
On Thu, 9 Aug 2007 16:09:14 -0700, John Firebaugh said: Following the Windows build instructions in the OpenSSL FIPS Users Guide (using MinGW and MSYS) results in OpenSSL libraries that may crash if used in a multithreaded program. The problem is due to the definition of MS_STATIC in

Re: [openssl.org #1564] bug: FIPS module can't be built on Solaris

2007-08-07 Thread Martin Simmons
On Tue, 7 Aug 2007 14:57:41 +0200 (CEST), Jan Pechanec via RT said: building the fips module ends with a tricky error: /usr/ccs/bin/ld: illegal option -- n usage: ld [-6:abc:d:e:f:h:il:mo:p:rstu:z:B:CD:F:GI:L:M:N:P:Q:R:S:VY:?] file(s) [-64] enforce a 64-bit

Re: [PATCH] ssl3_send_server_key_exchange (rsa) bug ?

2007-06-04 Thread Martin Simmons
On Sat, 2 Jun 2007 19:35:37 +0200, Stephen Henson said: On Fri, Jun 01, 2007, Robin Bryce wrote: Hi, In both openssl-0.9.8b and openssl trunk ssl3_send_server_key_exchange passes the address of an uninitialised variable to RSA_sign as the siglen parameter. In the presence of

Re: [PATCH] ssl3_send_server_key_exchange (rsa) bug ?

2007-06-01 Thread Martin Simmons
On Fri, 1 Jun 2007 16:21:35 +0100, Robin Bryce said: Hi, In both openssl-0.9.8b and openssl trunk ssl3_send_server_key_exchange passes the address of an uninitialised variable to RSA_sign as the siglen parameter. In the presence of RSA_FLAG_SIGN_VER and an engine implementation that

Re: adding a reference count to SSL_CTX

2007-03-02 Thread Martin Simmons
On Fri, 02 Mar 2007 07:58:14 +, Darryl Miles said: Delivered-To: openssl-dev-l@master.openssl.org Delivered-To: openssl-dev@openssl.org Martin Simmons wrote: On Thu, 01 Mar 2007 11:40:24 +0100, Peter Sylvester said: The crtl function basically would do: CRYPTO_add(ctx

Re: adding a reference count to SSL_CTX

2007-03-02 Thread Martin Simmons
On Fri, 02 Mar 2007 13:21:18 +0100, Peter Sylvester said: One can omit the SSL_CTX_free but in oder to be clean, someone must call it, and this may unfortunately not necessarily be the same instance who created it. OK, so a less hacky solution using the current APIs would be to do your own

Re: adding a reference count to SSL_CTX

2007-03-01 Thread Martin Simmons
On Thu, 01 Mar 2007 11:40:24 +0100, Peter Sylvester said: Hi, A call to SSL_new increments the reference count of the SSL_CTX object. In some application contexts one would like to pass around an SSL_CTX object and share it. If sharing occurs before an SSL_new is called and another

Re: PATCH (Re: Cross compile OpenSSL in Linux using MinGW32)

2006-10-23 Thread Martin Simmons
.dll and ssl32.dll. Patch includes code to support this difference, but I'm not absolutely sure it belongs there. BTW, what is the meaning of 32 in the names? -- Martin Simmons LispWorks Ltd http://www.lispworks.com

Re: PATCH (Re: Cross compile OpenSSL in Linux using MinGW32)

2006-10-23 Thread Martin Simmons
naming between 32- and 64-bit builds. Right, there are already unofficial 64-bit OpenSSL DLLs available with 32 in their name...but dropping it at the same time as eay sounds like a good option to me. -- Martin Simmons LispWorks Ltd http://www.lispworks.com

Re: 64-bit OpenSSL for Darwin/Mac OS X?

2006-07-14 Thread Martin Simmons
routines:SSL2_SET_CERTIFICATE:certificate verify failed:s2_clnt.c:1048: SSLv2, cipher (NONE) (NONE) 1 handshakes of 256 bytes done which I understand are planned failures. -- Martin Simmons - Original Message - From: Martin Simmons [EMAIL PROTECTED] To: openssl-dev@openssl.org Sent

64-bit OpenSSL for Darwin/Mac OS X?

2006-07-13 Thread Martin Simmons
make test, which printed 6571 lines of stuff. How do I tell if this is good stuff? -- Martin Simmons openssl-Configure.patch Description: Binary data