cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: abort trap: double-free bug in lib/ssluse.c:Curl_ossl_close() ???

From: Edward B. DREGER <eddy+public+spam_at_noc.everquick.net>
Date: Thu, 19 Apr 2007 02:03:53 +0000 (GMT)

DS> Date: Mon, 16 Apr 2007 21:34:30 +0200 (CEST)
DS> From: Daniel Stenberg

DS> Test 530 doesn't even use SSL so it has to be something different.

Yes, it appears that the lone test 530 failure was happenstance. I
mentioned that in case there were possibly some NS-related race
condition, but I [now] doubt that's the culprit.

I've found that OpenSSL also is internally detecting a divide-by-zero
error, which causes libcurl to [attempt to] clean up, which is when the
double-free trap occurs. i.e., strange things are apparently happening
within OpenSSL. (Even if the problem originates elsewhere, I question
the wisdom of waiting for it to become a div-by-0 error before detecting
it.)

Thanks again for your assistance and pointers!

Eddy

--
Everquick Internet - http://www.everquick.net/
A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
________________________________________________________________________
DO NOT send mail to the following addresses:
davidc_at_brics.com -*- jfconmaapaq_at_intc.net -*- sam_at_everquick.net
Sending mail to spambait addresses is a great way to get blocked.
Ditto for broken OOO autoresponders and foolish AV software backscatter.
Received on 2007-04-19