Kyle Hamilton wrote:
...
All malloc()/calloc()/free() needs to be done by the same library
version to avoid heap corruption.

true but this doesn't prevent us from using a custom memory pool on
top of the standard library malloc etc.

This includes the "local" calls that don't get put into kssl_ctx.

IMHO the problem with the other objects is that these objects
don't belong to openssl (we would need something like a
krb_malloc() etc. supplied by the kerberos library).

Cheers,
Nils
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to