SSL_library_init的内存泄露解决

最新推荐文章于 2025-05-23 12:10:34 发布

原创最新推荐文章于 2025-05-23 12:10:34 发布 · 4.5k 阅读

3 ·

CC 4.0 BY-SA版权

本文揭示了SSL_library_init调用load_builtin_compressions导致的内存泄露问题。在openssl环境中，由于缺乏相应的释放方法，调用该函数会留下未释放的内存。通过在ssl/ssl_ciph.c文件中新增SSL_free_compressions函数，可在清理资源时调用，有效避免内存泄露。

SSL_library_init调用load_builtin_compressions，但在最终释放openssl环境时，没有提供释放的方法，会导致内存泄露。

==30378==
==30378== HEAP SUMMARY:
==30378== in use at exit: 1,704 bytes in 3 blocks
==30378== total heap usage: 5,704 allocs, 5,701 frees, 1,563,697 bytes allocated
==30378==
==30378== 32 bytes in 1 blocks are still reachable in loss record 1 of 3
==30378== at 0x4C29EA3: malloc (vg_replace_malloc.c:309)
==30378== by 0x57739F7: CRYPTO_malloc (mem.c:351)
==30378== by 0x57A319E: sk_new (stack.c:162)
==30378== by 0x574ADF2: load_builtin_compressions (ssl_ciph.c:521)
==30378== by 0x574ADF2: SSL_COMP_get_compression_methods (ssl_ciph.c:2049)
==30378== by 0x575108E: SSL_library_init (ssl_algs.c:160)

解决方法如下

在\ssl\ssl_ciph.c最下增加如下代码，然后释放openssl资源时，调用SSL_free_compressions即可：

#ifndef OPENSSL_NO_COMP
// add by qsy;
void SSL_free_compressions(void) __attribute__ ((destructor));
void SSL_free_compressions(void)
{
if (ssl_comp_methods != NULL)
{
sk_SSL_COMP_free(ssl_comp_methods);
ssl_comp_methods = NULL;
}
}
#endif