DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=27653>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=27653

memory leak of loaded public key

           Summary: memory leak of loaded public key
           Product: Apache httpd-2.0
           Version: 2.0.48
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ssl
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


File & Lines: ./modules/ssl/ssl_engine_init.c: line 801-811
Problem: when the server use DSA encrypt its private key,
the block between line 801 - line 811 will load the public
key into pubkey, suppose pubkey != NULL, then it will be
free'd only when EVP_PKEY_missing_parameters(pubkey) satisfied.
Actually, it should be free'd whenever pubkey != NULL.
In my experiments, that memory object will be leaked because pubkey != NULL,
but EVP_PKEY_missing_parameters(pubkey) == 0.

-feng

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to