Displaying 2 results from an estimated 2 matches for "c2f9971".
Did you mean:
259971
2018 Dec 02
0
[PATCH nbdkit 4/4] crypto: Free TLS session.
...eed along the non-error path, both resulting
in a memory leak and providing an easy way for clients to blow up
nbdkit servers if they enable TLS support. Ooops.
Found by valgrind.
---
src/crypto.c | 5 +++++
1 file changed, 5 insertions(+)
diff --git a/src/crypto.c b/src/crypto.c
index 948e79e..c2f9971 100644
--- a/src/crypto.c
+++ b/src/crypto.c
@@ -391,6 +391,10 @@ crypto_close (struct connection *conn)
close (sockin);
if (sockout >= 0 && sockin != sockout)
close (sockout);
+
+ gnutls_deinit (*session);
+ free (session);
+ connection_set_crypto_session (conn, NULL);...
2018 Dec 02
10
[PATCH nbdkit 0/4] Multiple valgrind improvements and possible security fix.
I worked out why valgrind wasn't being applied to nbdkit when run by
many of the tests (patches 1-2). Unfortunately I'm not able to make
it actually fail tests when valgrind fails. Although the situation is
marginally improved in that you can now manually examine the *.log
files and find valgrind failures that way. Also adds valgrinding of
the Python plugin (patch 3).
Along the way I