If one calls COMP_METHOD *comp = COMP_zlib(), the first time this 
call is made, a valid COMP_METHOD is returned, and the comp->type is 
set correctly.  However, if you make the call a second time, a valid 
COMP_METHOD is returned, however the comp->type is set to 0.

This is with OpenSSL 0.9.7-beta3, on Windows XP.  The call is from a 
windows .com object.  OpenSSL 0.9.7 is static linked to the .com 
object, but the same thing happens if linked with the OpenSSL 0.9.7 
dll's.

This was observed when the Windows FTPS application starts, connects 
to a FTPS server supporting compression.  On the first connect, 
everything works fine.  However if you disconnect, then connect to 
the same host again (without exiting the Windows client), the windows 
client calls COMP_zlib to get the method, then checks the comp->type 
to make sure its valid.  It fails on this check, since it is zero.  
If however, you remove the check for the type, and just check the 
pointer returned form COMP_zlib(), everything works.

Note that after the first connect, and prior to the second connect, 
SSL was closed down properly, for both the command and data channel 
ssl connections.  If you exit the windows client after a connect, and 
start it again, then connect, it works ok.

Appears to be some type of reenterable problem.

Futher, the entry point OpenSSLDie is missing in the libeay32.def 
file, resulting in undefines when compiling ssleay32.lib.

In program ssl/s3_srvr.c, line 1591, there is a typo problem on:

if(enc.pms_length > sizeof pms)

which should be:

if(enc_pms.length > sizeof(pms)


Ken
__________________________________________________
Support
InterSoft International, Inc.
Voice: 888-823-1541, International 281-398-7060
Fax: 888-823-1542, International 281-560-9170
[EMAIL PROTECTED]
http://www.securenetterm.com


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to