You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In the following comment, I showed a simple test script that would illustrate that the nassl functions set0_trusted_stack and set0_untrusted appear to have memory leaks. Run as-is, the script will provide empty lists to both functions and leak memory.
SSLyze is going to switch to pyOpenSSL for path validation (nabla-c0d3/sslyze#566) so the leaky code will not be used by SSLyze anymore. This is a comment I had put for troubleshooting the memory leak in nassl:
# TODO(AD): There is probably a memory leak in nassl.X509 or nassl.X509_STORE_CTX
# https://github.com/nabla-c0d3/sslyze/issues/560
# It might be due to bad reference counting in nassl_X509_STORE_CTX_set0_trusted_stack()
# More specifically the call to X509_chain_up_ref() - is there corresponding call to decrease ref count?
# As a workaround, we cache the (huge) list of trusted certificates, for each trust store
Continuing the conversation from this SSLyze issue:
nabla-c0d3/sslyze#560
In the following comment, I showed a simple test script that would illustrate that the nassl functions set0_trusted_stack and set0_untrusted appear to have memory leaks. Run as-is, the script will provide empty lists to both functions and leak memory.
nabla-c0d3/sslyze#560 (comment)
The text was updated successfully, but these errors were encountered: