generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

This corrects the reference count handling in SSL_get_session.

Browse Source 
Previously, the returned SSL_SESSION didn't have its reference count
incremented so the SSL_SESSION could be freed at any time causing
seg-faults if the pointer was subsequently used. Code that uses
SSL_get_session must now make a corresponding SSL_SESSION_free() call when
it is done to avoid memory leaks (or blocked up session caches).

Submitted By: Geoff Thorpe <geoff@eu.c2.net>
This commit is contained in:
Mark J. Cox
1999-11-15 16:31:31 +00:00
parent 06556a1744
commit b7cfcfb7f8
2 changed files with 14 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
ssl/ssl_sess.c
View File

@@ -69,7 +69,16 @@ static STACK *ssl_session_meth=NULL;
SSL_SESSION *SSL_get_session(SSL *ssl)
{
return(ssl->session);
SSL_SESSION *sess;
/* Need to lock this all up rather than just use CRYPTO_add so that
* somebody doesn't free ssl->session between when we check it's
* non-null and when we up the reference count. */
CRYPTO_r_lock(CRYPTO_LOCK_SSL_SESSION);
sess = ssl->session;
if(sess)
sess->references++;
CRYPTO_r_unlock(CRYPTO_LOCK_SSL_SESSION);
return(sess);
}
int SSL_SESSION_get_ex_new_index(long argl, char *argp, int (*new_func)(),