Originally found in 1.0.0j. Did not check versions between 1.0.0j and
1.0.1c since it is still present in the current version.
I am also worried about lines 139-143:
139:if (key-pkey != NULL)
140:{
141:CRYPTO_add(key-pkey-references, 1,
On 11/29/2012 08:18 PM, Stephen Henson via RT wrote:
Thanks for the report, I've applied a fix.
I've not applied the second part of the patch because then the return
variable ret is set to the return value of X509_verify_cert() which is
intentional.
Steve.
Hi and thanks for the fast reply.
Hi guys,
I'm trying to find the source of a deadlock issue concerning apache
(2.2.22 with APR-1.4.6) and openssl-1.0.0j. From what I can see I have
the exact same situation as in
https://issues.apache.org/bugzilla/show_bug.cgi?id=53870 but the patch
referenced there
