Re: [Ipmitool-devel] Changes in lanplus_crypt_impl.c

2017-03-29 Thread Zdenek Styblik
On Wed, Mar 29, 2017 at 6:26 AM, holger.lie...@ts.fujitsu.com wrote: > To whom it may concern, > the latest changes in lanplus_crypt_impl.c together with the OpenSSL 1.1 > changes now leak the allocated cipher context on every call. You should call >

[Ipmitool-devel] Changes in lanplus_crypt_impl.c

2017-03-29 Thread holger.lie...@ts.fujitsu.com
To whom it may concern, the latest changes in lanplus_crypt_impl.c together with the OpenSSL 1.1 changes now leak the allocated cipher context on every call. You should call EVP_CIPHER_CTX_free(ctx), also I would suggest to call EVP_CIPHER_CTX_cleanup(ctx) always and not only in the success case