[Swan-commit] Changes to ref refs/heads/master

Paul Wouters paul at vault.libreswan.fi
Tue Oct 25 21:31:25 UTC 2016


New commits:
commit 687c5e0053fe42398305ab6bd27c2615870e0fb8
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue Oct 25 17:31:19 2016 -0400

    update changes

commit c2ea09114589251c4a1aa615038bf86c3cd9b367
Author: Bill Rios <brios94751 at yahoo.com>
Date:   Tue Oct 25 17:29:19 2016 -0400

    pluto: Fix ca name and generalName leak lsbz#276 [Bill Rios]
    
    When using the --leak-detective option, after bringing a few IPsec tunnels
    up it reports the following memory leaks when stopping ipsec/pluto:
    
    Oct  6 15:52:38: leak: ca name, item size: 117
    Oct  6 15:52:38: leak: generalName, item size: 32
    Oct  6 15:52:38: leak: ca name, item size: 117
    Oct  6 15:52:38: leak: generalName, item size: 32
    Oct  6 15:52:38: leak: ca name, item size: 117
    Oct  6 15:52:38: leak: generalName, item size: 32
    Oct  6 15:52:38: leak: ca name, item size: 117
    Oct  6 15:52:38: leak: generalName, item size: 32
    Oct  6 15:52:38: leak: ca name, item size: 117
    
    This appears to be because the head of a linked list of generalName_t
    structures is not saved in st->st_requested_ca in the functions
    ikev1_decode_cr and ikev2_decode_cr.  Once it is in st->st_requested_ca
    then it is freed later on whenever the state is freed and those
    'ca/generalName' leaks no longer show up in the --leak-detective report.
    
    Signed-off-by: Paul Wouters <pwouters at redhat.com>



More information about the Swan-commit mailing list