[Openvpn-devel] [PATCH] Avoid memory leak in hmac_ctx_new (OpenSSL 3.0 only)

2021-10-30 Thread selva . nair
From: Selva Nair In OpenSSL 3.0, fetched algorithms must be freed (down referenced). In this case, though EVP_MAC_CTX_new() keeps a reference to 'hmac', it up-refs it. So we have to free it here before return. (Tested using an enable-asan build). Signed-off-by: Selva Nair --- src/openvpn/cryp

Re: [Openvpn-devel] [PATCH v3 10/21] [OSSL 3.0] Replace EVP_get_cipherbyname with EVP_CIPHER_fetch

2021-10-30 Thread Selva Nair
This has an ACK, but will leak memory in OpenSSL 3.0 On Tue, Oct 19, 2021 at 2:32 PM Arne Schwabe wrote: > In OpenSSL 3.0 EVP_get_cipherbyname return a non NULL algorithm > even if the algorithm is not avaialble with the currently available > provider. Luckily EVP_get_cipherbyname can be used he

[Openvpn-devel] Fwd: [PATCH v4] [OSSL 3.0] Use EVP_PKEY_get_group_name to query group name

2021-10-30 Thread Selva Nair
Somehow I managed to mess-up the reply address with this one. No wonder it failed to show up in patchwork. Sending again to the list -- Forwarded message - From: Selva Nair Date: Fri, Oct 29, 2021 at 12:06 PM Subject: Re: [Openvpn-devel] [PATCH v4] [OSSL 3.0] Use EVP_PKEY_get_grou