On Tue, 28 Feb 2017, Andrew Cagney wrote: > /* Clean up. */ > free_any_symkey("sym_key", &sym_key); > > so from our POV the key was freed. However NSS has kept a handle on > that memory and will recycle it repeatedly. Why would this be different between IKEv1 and IKEv2 though? Since the report says the leak is much worse for IKEv2? Paul