luo980/curl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
bb84f82476
curl/lib
History
Fabian Keil a15342ddc0
wolfssl: plug memory leak in wolfssl_connect_step2() 
Fixes:

     test 2034...[simple HTTPS GET with DER public key pinning]
     ==61829== 22,610 (3,744 direct, 18,866 indirect) bytes in 1 blocks are definitely lost in loss record 51 of 54
     ==61829==    at 0x484BB74: malloc (vg_replace_malloc.c:446)
     ==61829==    by 0x4B53A80: wolfSSL_Malloc (memory.c:344)
     ==61829==    by 0x4C1C8E1: wolfSSL_X509_new (x509.c:5326)
     ==61829==    by 0x4C3977D: d2i_X509orX509REQ (x509.c:3628)
     ==61829==    by 0x4C1D1F4: wolfSSL_X509_d2i (x509.c:3664)
     ==61829==    by 0x4C1C37B: wolfSSL_X509_dup (x509.c:13425)
     ==61829==    by 0x4C197DB: wolfSSL_get_peer_certificate (ssl.c:18765)
     ==61829==    by 0x33297C: wolfssl_connect_step2 (wolfssl.c:875)
     ==61829==    by 0x331669: wolfssl_connect_common (wolfssl.c:1287)
     ==61829==    by 0x3303E9: wolfssl_connect_nonblocking (wolfssl.c:1319)
     ==61829==    by 0x32FE89: ssl_connect_nonblocking (vtls.c:510)
     ==61829==    by 0x32DBE5: ssl_cf_connect (vtls.c:1679)
     ==61829==    by 0x27ABD7: Curl_conn_cf_connect (cfilters.c:307)
     ==61829==    by 0x27D9CF: cf_setup_connect (connect.c:1199)
     ==61829==    by 0x27ABD7: Curl_conn_cf_connect (cfilters.c:307)
     ==61829==    by 0x283CEA: cf_hc_baller_connect (cf-https-connect.c:135)

Closes #13272
2024-04-04 08:56:43 +02:00
..
vauth
vquic vquic: use CURL_FORMAT_CURL_OFF_T for 64 bit printf output 2024-03-31 10:59:55 +02:00
vssh
vtls
.checksrc
.gitattributes
.gitignore
altsvc.c
altsvc.h
amigaos.c
amigaos.h
arpa_telnet.h
asyn-ares.c
asyn-thread.c
asyn.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
base64.c
bufq.c
bufq.h lib: Curl_read/Curl_write clarifications 2024-02-28 12:58:55 +01:00
bufref.c
bufref.h
c-hyper.c
c-hyper.h
cf-h1-proxy.c
cf-h1-proxy.h
cf-h2-proxy.c
cf-h2-proxy.h
cf-haproxy.c
cf-haproxy.h lib: remove unused functions, make single-use static 2023-05-23 11:08:51 +02:00
cf-https-connect.c
cf-https-connect.h lib: give source files cf-http.* better fitting names 2023-03-02 08:48:34 +01:00
cf-socket.c
cf-socket.h lib: keep conn IP information together 2024-03-09 23:24:58 +01:00
cfilters.c lib: keep conn IP information together 2024-03-09 23:24:58 +01:00
cfilters.h
CMakeLists.txt
config-amigaos.h
config-dos.h
config-mac.h
config-os400.h
config-plan9.h
config-riscos.h
config-win32.h
config-win32ce.h
conncache.c
conncache.h
connect.c
connect.h
content_encoding.c content_encoding: brotli and others, pass through 0-length writes 2024-03-28 16:21:20 +01:00
content_encoding.h content_encoding: make Curl_all_content_encodings allocless 2023-11-07 16:35:30 +01:00
cookie.c
cookie.h
curl_addrinfo.c
curl_addrinfo.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
curl_base64.h
curl_config.h.cmake
curl_ctype.h
curl_des.c misc: Fix typos in docs and lib 2024-03-01 09:59:48 +01:00
curl_des.h
curl_endian.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
curl_endian.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
curl_fnmatch.c
curl_fnmatch.h
curl_get_line.c lib: convert Curl_get_line to use dynbuf 2024-02-07 09:22:10 +01:00
curl_get_line.h
curl_gethostname.c
curl_gethostname.h
curl_gssapi.c
curl_gssapi.h
curl_hmac.h
curl_krb5.h
curl_ldap.h
curl_md4.h
curl_md5.h
curl_memory.h
curl_memrchr.c
curl_memrchr.h
curl_multibyte.c
curl_multibyte.h
curl_ntlm_core.c openssl: fix building with v3 no-deprecated + add CI test 2023-11-23 02:03:02 +00:00
curl_ntlm_core.h
curl_ntlm_wb.c
curl_ntlm_wb.h
curl_path.c
curl_path.h
curl_printf.h curl.h: add CURLE_TOO_LARGE 2023-12-18 10:34:22 +01:00
curl_range.c
curl_range.h
curl_rtmp.c lib: send rework 2024-02-27 08:58:10 +01:00
curl_rtmp.h
curl_sasl.c
curl_sasl.h
curl_setup_once.h
curl_setup.h
curl_sha256.h
curl_sha512_256.c
curl_sha512_256.h
curl_sspi.c
curl_sspi.h
curl_threads.c
curl_threads.h
curl_trc.c
curl_trc.h
curlx.h
cw-out.c TLS: start shutdown only when peer did not already close 2024-03-15 09:19:58 +01:00
cw-out.h
dict.c
dict.h
doh.c
doh.h
dynbuf.c build: delete/replace clang warning pragmas 2024-01-27 21:19:41 +00:00
dynbuf.h
dynhds.c
dynhds.h
easy_lock.h
easy.c
easygetopt.c
easyif.h lib: Curl_read/Curl_write clarifications 2024-02-27 14:13:56 +01:00
easyoptions.c
easyoptions.h
escape.c
escape.h
file.c
file.h
fileinfo.c ftplistparser: replace realloc with dynbuf 2023-03-28 10:11:33 +02:00
fileinfo.h
fopen.c fopen: fix narrowing conversion warning on 32-bit Android 2024-02-27 14:26:22 +01:00
fopen.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
formdata.c
formdata.h
ftp.c lib: keep conn IP information together 2024-03-09 23:24:58 +01:00
ftp.h
ftplistparser.c
ftplistparser.h wildcard: remove files and move functions into ftplistparser.c 2023-03-03 23:25:30 +01:00
functypes.h windows: use built-in _WIN32 macro to detect Windows 2023-11-22 15:42:25 +00:00
getenv.c
getinfo.c
getinfo.h
gopher.c
gopher.h
hash.c hash: fix assigning same value 2023-04-14 09:26:26 +02:00
hash.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
headers.c
headers.h
hmac.c
hostasyn.c
hostip4.c
hostip6.c hostip6: fix DEBUG_ADDRINFO builds 2023-10-28 00:27:20 -04:00
hostip.c misc: Fix typos in docs and lib 2024-03-01 09:59:48 +01:00
hostip.h hostip: show the list of IPs when resolving is done 2023-10-20 23:00:10 +02:00
hostsyn.c
hsts.c
hsts.h
http1.c http: h1/h2 proxy unification 2023-09-25 20:12:18 +02:00
http1.h
http2.c
http2.h
http_aws_sigv4.c
http_aws_sigv4.h
http_chunks.c
http_chunks.h lib: Curl_read/Curl_write clarifications 2024-02-28 12:58:55 +01:00
http_digest.c lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
http_digest.h lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
http_negotiate.c
http_negotiate.h
http_ntlm.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
http_ntlm.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
http_proxy.c
http_proxy.h http: h1/h2 proxy unification 2023-09-25 20:12:18 +02:00
http.c http: with chunked POST forced, disable length check on read callback 2024-04-02 08:41:44 +02:00
http.h http: improve response header handling, save cpu cycles 2024-03-19 07:53:43 +01:00
idn.c
idn.h
if2ip.c lib: --disable-bindlocal builds curl without local binding support 2023-08-17 17:17:59 +02:00
if2ip.h
imap.c mime: add client reader 2024-03-06 00:17:37 +01:00
imap.h
inet_ntop.c
inet_ntop.h
inet_pton.c
inet_pton.h
krb5.c
ldap.c
libcurl.plist.in
libcurl.rc copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
libcurl.vers.in
llist.c
llist.h
macos.c macOS: fix target detection more 2023-07-29 23:42:53 +02:00
macos.h
Makefile.am
Makefile.inc lib: send rework 2024-02-27 08:58:10 +01:00
Makefile.mk
Makefile.soname
md4.c
md5.c lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
memdebug.c build: delete/replace clang warning pragmas 2024-01-27 21:19:41 +00:00
memdebug.h build: enable missing OpenSSF-recommended warnings, with fixes 2023-12-16 13:12:37 +00:00
mime.c
mime.h
mprintf.c misc: Fix typos in docs and lib 2024-03-01 09:59:48 +01:00
mqtt.c
mqtt.h
multi.c
multihandle.h
multiif.h lib: further send/upload handling polish 2024-03-04 08:42:56 +01:00
netrc.c
netrc.h
nonblock.c
nonblock.h
noproxy.c
noproxy.h
openldap.c openldap: create ldap URLs correctly for IPv6 addresses 2024-03-30 22:50:26 +01:00
optiontable.pl
parsedate.c
parsedate.h
pingpong.c
pingpong.h
pop3.c lib: send rework 2024-02-27 08:58:10 +01:00
pop3.h
progress.c getinfo: CURLINFO_QUEUE_TIME_T 2023-12-27 09:28:48 +01:00
progress.h getinfo: CURLINFO_QUEUE_TIME_T 2023-12-27 09:28:48 +01:00
psl.c
psl.h
rand.c
rand.h windows: use built-in _WIN32 macro to detect Windows 2023-11-22 15:42:25 +00:00
rename.c windows: use built-in _WIN32 macro to detect Windows 2023-11-22 15:42:25 +00:00
rename.h
request.c
request.h http: separate response parsing from response action 2024-03-21 09:34:40 +01:00
rtsp.c
rtsp.h
select.c windows: use built-in _WIN32 macro to detect Windows 2023-11-22 15:42:25 +00:00
select.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
sendf.c
sendf.h
setopt.c
setopt.h
setup-os400.h
setup-vms.h
setup-win32.h windows: simplify detecting and using system headers 2023-12-16 13:13:44 +00:00
sha256.c
share.c
share.h
sigpipe.h
slist.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
slist.h
smb.c
smb.h
smtp.c
smtp.h
sockaddr.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
socketpair.c windows: delete redundant headers 2023-12-18 14:56:57 +00:00
socketpair.h
socks_gssapi.c
socks_sspi.c
socks.c lib: keep conn IP information together 2024-03-09 23:24:58 +01:00
socks.h
speedcheck.c
speedcheck.h
splay.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
splay.h
strcase.c
strcase.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
strdup.c
strdup.h
strerror.c
strerror.h
strtok.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
strtok.h
strtoofft.c
strtoofft.h
system_win32.c system_win32: fix a function pointer assignment warning 2023-12-28 03:38:44 -05:00
system_win32.h
telnet.c
telnet.h
tftp.c lib: further send/upload handling polish 2024-03-04 08:42:56 +01:00
tftp.h
timediff.c
timediff.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
timeval.c
timeval.h
transfer.c
transfer.h lib: move 'done' parameter to SingleRequests 2024-03-11 23:27:02 +01:00
url.c
url.h lib: keep conn IP information together 2024-03-09 23:24:58 +01:00
urlapi-int.h urlapi: make internal function start with Curl_ 2023-04-27 08:36:51 +02:00
urlapi.c lib: initialize output pointers to NULL before calling strto[ff,l,ul] 2024-02-26 17:19:27 +01:00
urldata.h
version_win32.c
version_win32.h
version.c
warnless.c windows: use built-in _WIN32 macro to detect Windows 2023-11-22 15:42:25 +00:00
warnless.h
ws.c
ws.h