Skip Menu |

This queue is for tickets about the Net-SSLeay CPAN distribution.

Report information
The Basics
Id: 124241
Status: resolved
Priority: 0/
Queue: Net-SSLeay
People
Owner: MIKEM [...] cpan.org
Requestors: CHORNY [...] cpan.org
Steffen_Ullrich [...] genua.de
Cc:
AdminCc:
Bug Information
Severity: (no value)
Broken in: 1.84
Fixed in: 1.85

History Show all quoted text
  Sat Jan 27 14:29:53 2018 Steffen_Ullrich [...] genua.de - Ticket created
Subject: memory corruption OCSP on Windows
The changes I made for fixing a memory leak within the OCSP code do not work properly on Windows because I've used a simple free instead of OPENSSL_free to free memory allocated by OpenSSL. This results in messages like "Free to wrong pool 3f5e38 not 40b0122..." - see RT#124236. The fix is simple: use OPENSSL_free instead of free. Appropriate patch attached. Regards, Steffen
Subject: SSLeay.xs.diff
Index: SSLeay.xs =================================================================== --- SSLeay.xs (revision 516) +++ SSLeay.xs (working copy) @@ -6608,7 +6608,7 @@ croak("OCSP certid has no length"); XPUSHs(sv_2mortal(newSVpvn((char *)pi, len))); - free(pi); + OPENSSL_free(pi); OCSP_CERTID_free(id); }
  Sat Jan 27 16:06:44 2018 mikem [...] airspayce.com - Correspondence added
Subject: Re: [rt.cpan.org #124241] memory corruption OCSP on Windows
Date: Sun, 28 Jan 2018 06:43:26 +1000
To: bug-Net-SSLeay [...] rt.cpan.org
From: Mike McCauley <mikem [...] airspayce.com>
Thanks Steffen, your patch is in SVN 518 and will appear in the next release. Cheers. On Sunday, 28 January 2018 05:29:55 AEST you wrote: Show quoted text
> Sat Jan 27 14:29:53 2018: Request 124241 was acted upon. > Transaction: Ticket created by SULLR > Queue: Net-SSLeay > Subject: memory corruption OCSP on Windows > Broken in: 1.84 > Severity: (no value) > Owner: Nobody > Requestors: Steffen_Ullrich@genua.de > Status: new > Ticket <URL: https://rt.cpan.org/Ticket/Display.html?id=124241 > > > > The changes I made for fixing a memory leak within the OCSP code do not work > properly on Windows because I've used a simple free instead of OPENSSL_free > to free memory allocated by OpenSSL. This results in messages like "Free to > wrong pool 3f5e38 not 40b0122..." - see RT#124236. > > The fix is simple: use OPENSSL_free instead of free. Appropriate patch > attached. > > Regards, > Steffen
-- Mike McCauley VK4AMM mikem@airspayce.com Airspayce Pty Ltd 9 Bulbul Place Currumbin Waters QLD 4223 Australia http://www.airspayce.com Phone +61 7 5598-7474
  Sat Jan 27 16:06:45 2018 The RT System itself - Status changed from 'new' to 'open'
  Wed Feb 14 14:36:22 2018 CHORNY [...] cpan.org - Correspondence added
On Sat Jan 27 16:06:44 2018, mikem@airspayce.com wrote: Show quoted text
> Thanks Steffen, > > your patch is in SVN 518 and will appear in the next release.
Mike, can you release a new version? There are several important fixes already in SVN. Net::SSLeay is important to both regular users and cpantesters who test development versions of perl. Net::SSLeay directly or indirectly is used by a large number of CPAN modules and is included into Strawberry perl. -- Alexandr Ciornii, http://chorny.net
  Wed Feb 14 14:37:09 2018 CHORNY [...] cpan.org - Requestor CHORNY added
  Wed Feb 14 15:41:05 2018 mikem [...] airspayce.com - Correspondence added
Subject: Re: [rt.cpan.org #124241] memory corruption OCSP on Windows
Date: Thu, 15 Feb 2018 06:18:37 +1000
To: bug-Net-SSLeay [...] rt.cpan.org
From: Mike McCauley <mikem [...] airspayce.com>
Hello, We are in the process of moving this project to a new maintainer. Im sure they will make a new release very soon. Cheers. On Thursday, 15 February 2018 05:36:24 AEST Alexandr Ciornii via RT wrote: Show quoted text
> Queue: Net-SSLeay > Ticket <URL: https://rt.cpan.org/Ticket/Display.html?id=124241 > > > On Sat Jan 27 16:06:44 2018, mikem@airspayce.com wrote:
> > Thanks Steffen, > > > > your patch is in SVN 518 and will appear in the next release.
> > Mike, can you release a new version? There are several important fixes > already in SVN. Net::SSLeay is important to both regular users and > cpantesters who test development versions of perl. Net::SSLeay directly or > indirectly is used by a large number of CPAN modules and is included into > Strawberry perl.
-- Mike McCauley VK4AMM mikem@airspayce.com Airspayce Pty Ltd 9 Bulbul Place Currumbin Waters QLD 4223 Australia http://www.airspayce.com Phone +61 7 5598-7474
  Sun Jul 08 20:52:56 2018 chrisn [...] cpan.org - Status changed from 'open' to 'resolved'
  Sun Jul 08 20:52:57 2018 chrisn [...] cpan.org - Given to MIKEM
  Sun Jul 08 20:52:57 2018 chrisn [...] cpan.org - Fixed in 1.85 added