Memory leak in 2.xx

Nikos Mavrogiannopoulos nmav at
Thu Mar 8 23:29:17 CET 2012

On 03/08/2012 02:21 PM, Sam Varshavchik wrote:

> In 2.12.14 _rsa_generate_params() has a stray "tmp =
> _gnutls_mpi_alloc_like (resarr[0]);". The malloc-ed memory never gets
> freed.
> Looks like this code is gone in 3.x, so only 2.x is impacted.
> This is called from gnutls_x509_privkey_generate(). A long-running
> application that keeps creating private keys, for temporary use, and
> destroying them after use, will end up leaking memory. This is also in
> the code path for temporary RSA parameter generation when using
> export-grade RSA keys. This will also leak memory.

Thank you for reporting it. I've applied the patch by Tomas[0]. Does
it fix the issue you see?



More information about the Gnutls-devel mailing list