On 03/08/2012 02:21 PM, Sam Varshavchik wrote:
> In 2.12.14 _rsa_generate_params() has a stray "tmp =
> _gnutls_mpi_alloc_like (resarr[0]);". The malloc-ed memory never gets
> freed.
>
> Looks like this code is gone in 3.x, so only 2.x is impacted.
> This is called from gnutls_x509_privkey_generate(). A long-running
> application that keeps creating private keys, for temporary use, and
> destroying them after use, will end up leaking memory. This is also in
> the code path for temporary RSA parameter generation when using
> export-grade RSA keys. This will also leak memory.
Thank you for reporting it. I've applied the patch by Tomas[0]. Does
it fix the issue you see?
[0].
http://git.savannah.gnu.org/gitweb/?
p=gnutls.git;a=commitdiff;h=ff19ba8b9c5540e46ec876f264ffdbb92cfcf8c9