Re: zlib double free bug and openssl question.

[Lenny Miceli]

Reading the posting from Lutz Jaenicke saying that if OpenSSL is not
specifically compiled with zlib then it won't have zlib compiled in,
then can anyone explain if you don't compile OpenSSL with zlib why it still
contains the string zlib many times within libcrypto.a?  Thanks for any
insight anyone can give into this.

 strings libcrypto.a
Request error: class file/memory mismatch
COMP_zlib
ZLIB
zlib compression
c_zlib.o/   997457715   6789  390   100644  2044  `
COMP_zlib
c_zlib.c
/dir1/subdir/openssl-0.9.6b/crypto/comp;
/dir2/lang/SUNWspro/bin/../WS6/bin/cc -I.. -I../../include -KPIC -DTHREADS
-D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -xtarget=ultra -xarch=v8plus -xO5
-xstrconst -xdepend -Xa -DB_ENDIAN -DBN_DIV2W -DULTRASPARC -DMD5_ASM -c
c_zlib.c -W0,-xp
c_zlib.c
zlib_method
COMP_zlib

Thanks,
  Lenny Miceli
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

zlib double free bug and openssl question.

[Lenny Miceli]

I've tried to search the archives/bug reports/faq's and didn't find any
definitive answers on the zlib Double Free Bug CERT's Advisory CA-2002-07
issue.  Does openssl v0.9.6b or above have this issue?  I know if you do a
stings on libcrypto.a you find zlib alot, so I assume somehow the zlib library
is used in crypto/comp/c_zlib.c or somewhere.  Thanks for any help
you can give me.

Please mail me directly since I'm not on this list.

Thanks for your time and help,
  Lenny Miceli
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]