Possible memory leak when using ECDHE ciphers in OpenSSL-1.0.1f

2014-02-13 Thread Varma Dantuluri
In OpenSSL-1.0.1f, in 'ssl3_send_server_key_exchange' function, when all the below conditions are true, there is a potential memory leak. 1) 'type & SSL_kEECDH' is true, (ie the key exchange is ephemeral ecdh) 2) 'ecdhp == NULL' && 's->cert->ecdh_tmp_cb != NULL' 3) 's->cert->ecdh_tmp_cb' mallocs a

Re: openssl-fips.1.2.4

2014-02-13 Thread Dr. Stephen Henson
On Wed, Feb 12, 2014, sarju tambe wrote: > Hi, > > I have few queries on platform support of openssl fips. > > 1) Does openssl -fips-1.2.4 support building on windows 2012 R2 OS with VS > 2013 compiler? > 2) Does Openssl-fips-1.2.4 support on building on x64 platforms with Intel > C compiler? >