In message <[EMAIL PROTECTED]> on Fri, 26 Sep 2003 16:27:38 -0400, Andrew Mann <[EMAIL 
PROTECTED]> said:

amann> ssl_lib.c  function SSL_free() does not appear to free this memory.
amann> 
amann>  As a note, the system libraries here are openssl 0.9.7a, but I'm 
amann> looking through the 0.9.7b source and the handling doesn't appear any 
amann> different there.
amann>  In fact, kssl_ctx_free() isn't called from anywhere in ssl/*.c  (it's 
amann> commented out from one location).
amann> 
amann>  Seems like a simple fix:
amann> 
amann> diff -up ssl_lib.c ../ssl-modified/ssl_lib.c
amann> --- ssl_lib.c   2003-01-30 06:00:37.000000000 -0500
amann> +++ ../ssl-modified/ssl_lib.c   2003-09-26 15:36:14.000000000 -0400
amann> @@ -473,6 +473,10 @@ void SSL_free(SSL *s)
amann> 
amann>          if (s->method != NULL) s->method->ssl_free(s);
amann> 
amann> +#ifndef        OPENSSL_NO_KRB5
amann> +       if (s->kssl_ctx != NULL) kssl_ctx_free(s->kssl_ctx);
amann> +#endif /* OPENSSL_NO_KRB5 */
amann> +
amann>          OPENSSL_free(s);
amann>          }

Thanks for your patch, I just applied it in the 0.9.7 and 0.9.8-dev
branches.

-- 
Richard Levitte   \ Tunnlandsv�gen 3  \ [EMAIL PROTECTED]
[EMAIL PROTECTED]  \ S-168 36  BROMMA  \ T: +46-8-26 52 47
                    \      SWEDEN       \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to