Re: RFR: 8294906: Memory leak in PKCS11 TLS server [v2]

2022-10-07 Thread Daniel Jeliński
> C_DeriveKey with mechanisms `CKM_*_KEY_AND_MAC_DERIVE` always returns mac > keys, even if macBits is zero. These keys must be free'd when no longer > needed. > > Verified that: > - SSL server configured with PKCS11-NSS provider leaks memory without this > patch, does not leak memory with this

Re: RFR: 8294906: Memory leak in PKCS11 TLS server

2022-10-07 Thread Daniel Jeliński
On Thu, 6 Oct 2022 13:27:23 GMT, Daniel Jeliński wrote: > C_DeriveKey with mechanisms `CKM_*_KEY_AND_MAC_DERIVE` always returns mac > keys, even if macBits is zero. These keys must be free'd when no longer > needed. > > Verified that: > - SSL server configured with PKCS11-NSS provider leaks me

Re: RFR: 8294906: Memory leak in PKCS11 TLS server

2022-10-06 Thread Mark Powers
On Thu, 6 Oct 2022 13:27:23 GMT, Daniel Jeliński wrote: > C_DeriveKey with mechanisms `CKM_*_KEY_AND_MAC_DERIVE` always returns mac > keys, even if macBits is zero. These keys must be free'd when no longer > needed. > > Verified that: > - SSL server configured with PKCS11-NSS provider leaks me

Re: RFR: 8294906: Memory leak in PKCS11 TLS server

2022-10-06 Thread Valerie Peng
On Thu, 6 Oct 2022 13:27:23 GMT, Daniel Jeliński wrote: > C_DeriveKey with mechanisms `CKM_*_KEY_AND_MAC_DERIVE` always returns mac > keys, even if macBits is zero. These keys must be free'd when no longer > needed. > > Verified that: > - SSL server configured with PKCS11-NSS provider leaks me

RFR: 8294906: Memory leak in PKCS11 TLS server

2022-10-06 Thread Daniel Jeliński
C_DeriveKey with mechanisms `CKM_*_KEY_AND_MAC_DERIVE` always returns mac keys, even if macBits is zero. These keys must be free'd when no longer needed. Verified that: - SSL server configured with PKCS11-NSS provider leaks memory without this patch, does not leak memory with this patch - The sa