Re: (ITS#8566) OpenLDAP client API SASL auth memory leak

[hyc@symas.com]

william.b.clay@acm.org wrote:
> Full_Name: Bill Clay
> Version: 2.4.44
> OS: Debian/GNU Linux 7.8 (Wheezy)
> URL:
> Submission from: (NULL) (79.12.44.250)

> ==4149== 4,896 bytes in 9 blocks are definitely lost in loss record 122 of 124
> ==4149==    at 0x4C28CCE: realloc (vg_replace_malloc.c:632)
> ==4149==    by 0x7712426: _plug_buf_alloc (in
> /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25)
> ==4149==    by 0x770C232: add_to_challenge (in
> /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25)
> ==4149==    by 0x770E689: make_client_response (in
> /r%r/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25)
> ==4149==    by 0x770EC97: digestmd5_client_mech_step (in
> /usr/lib/x86_64-linux-gnu/sasl2/libdigestmd5.so.2.0.25)

This is very clearly a leak in the digestmd5.so module. It seems you should be 
reporting this to Cyrus SASL, not us.

> ==4149==    by 0x5CD03AD: sasl_client_step (in
> /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25)
> ==4149==    by 0x5CD08DA: sasl_client_start (in
> /usr/lib/x86_64-linux-gnu/libsasl2.so.2.0.25)
> ==4149==    by 0x405386E: ldap_int_sasl_bind (cyrus.c:510)
> ==4149==    by 0x4056E5F: ldap_sasl_interactive_bind (sasl.c:487)
> ==4149==    by 0x405702B: ldap_sasl_interactive_bind_s (sasl.c:521)
> ==4149==    by 0x4027663: mldap_bind (mldap.c:647)
> ==4149==    by 0x408C31: luaD_precall (in /usr/bin/lua5.2)
> ==4149==
> ==4149== LEAK SUMMARY:
> ==4149==    definitely lost: 4,896 bytes in 9 blocks
> ==4149==    indirectly lost: 0 bytes in 0 blocks
> ==4149==      possibly lost: 0 bytes in 0 blocks
> ==4149==    still reachable: 40,718 bytes in 325 blocks
> ==4149==         suppressed: 0 bytes in 0 blocks
> ==4149== Reachable blocks (those to which a pointer was found) are not shown.D%D
> ==4149== To see them, rerun with: --leak-check=full --show-reachable=yes
> ==4149==
> ==4149== For counts of detected and suppressed errors, rerun with: -v
> ==4149== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 31 from 7)
> bill@fuji:/usr/local/src/liquid_feedback_frontend-v3.2.1/lib/mldap$
>
>


-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/