OpenSSLCryptoBase64::b642BN() leaks memory in the following line:
return BN_dup(BN_bin2bn(buf, bufLen, NULL));
BN_bin2bn() allocates a BIGNUM, so there's no need to dup it, and doing so causes the first one to leak.
Thanks! Will fix in CVS on the weekend.
Cheers, Berin