[19195] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: openssl_init in multithreaded programs

daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Jun 11 21:09:00 2015

From: Russ Allbery <eagle@eyrie.org>
To: "krbdev\@mit.edu" <krbdev@mit.edu>
In-Reply-To: <557867B6.7080801@mit.edu> (Greg Hudson's message of "Wed, 10 Jun
	2015 12:37:10 -0400")
Date: Thu, 11 Jun 2015 18:08:46 -0700
Message-ID: <87381x20o1.fsf@hope.eyrie.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Greg Hudson <ghudson@mit.edu> writes:

> It's also worth noting that we never tear down OpenSSL (because we have
> no way of knowing whether the application or another library is still
> using it), so all of the heap memory it allocates could get lost if the
> PKINIT module and OpenSSL library are unloaded.  This shouldn't happen
> with 1.13 on platforms with RTLD_NODELETE.

Oh, even for PAM modules where the PAM module and libkrb5 are all
unloaded?  That's great news!

-- 
Russ Allbery (eagle@eyrie.org)              <http://www.eyrie.org/~eagle/>
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post