Re: [openssl.org #2124] memory mismanagement in OpenSSL (patch included against 0.9.8l)

2009-12-08 Thread Jan Pechanec via RT
On Tue, 8 Dec 2009, Jan Pechanec wrote: sorry, forgot to include a link to the OpenSolaris bugster: http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6441083 with an explanation of a person who reported the problem. J. > > hi, > > there are some pla

[openssl.org #2124] memory mismanagement in OpenSSL (patch included against 0.9.8l)

2009-12-08 Thread Jan Pechanec via RT
hi, there are some places where functions allocating memory are not checked against NULL, or are checked too late (LHASH code). We run some tests with libumem(3lib) and "mtbf=5000" (mean time between failure) in UMEM_DEBUG, simulating occasional memory shortages and that was ca