On Wed, 3 Jun 2009, Kamil Dudka wrote:

> I've compiled libcurl without HAVE_PK11_CREATEGENERICOBJECT to exclude PEM
> reader bugs. So it uses only the NSS database for certificates and it still
> leaks memory with your patch. The only difference is that I use SSLv3
> (meaning diffrent NSS code).
>
> It seems like a NSS bug to me. I've spent some time debugging it, but
> without any success yet. The certificate is duplicated two times within NSS
> - in the ssl3_SendCertificate() function and in the ssl3_HandleFinished()
> function. So the refCount became 3 and then it is never decreased to zero
> (but only 1).

Isn't it time to try to convert the problem to a stand-alone app that shows
the leak, and involve the NSS team on this?

-- 
  / daniel.haxx.se