> You're missing the point -- your comment is the height of irony, in a
> way.
> 
> Use a suppression to make Valgrind shut up.
> 
>         /r$

I think you misunderstand his issue. His issue is not "valgrind reports a
spurious error/warning". His issue is "-DPURIFY does not do what I think
it's supposed to do". Perhaps my recollection is incorrect, but my
recollection was that "-DPURIFY" was supposed to make OpenSSL not process
uninitialized data with code precisely like that suggested here, accepting
that there might be some reduction in the amount of entropy that OpenSSL
gets in exchange for having only one switch to flip.

The "-DPURIFY" flag is used precisely this way in other projects, shutting
off all manner of 'optimizations' that interfere with tools like Purify,
valgrind, and others.

DS



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to