mirror of
https://git.libssh.org/projects/libssh.git
synced 2025-12-17 06:18:58 +03:00
13935fca7e
The libgcrypt has a lot of reachable code so allowing it to fail Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
200 lines
2.8 KiB
Plaintext
200 lines
2.8 KiB
Plaintext
### GLIBC
|
|
{
|
|
glibc_regcomp
|
|
Memcheck:Leak
|
|
fun:*alloc
|
|
...
|
|
fun:regcomp
|
|
}
|
|
{
|
|
glibc_getaddrinfo_leak
|
|
Memcheck:Leak
|
|
fun:malloc
|
|
fun:make_request
|
|
fun:__check_pf
|
|
fun:getaddrinfo
|
|
fun:getai
|
|
fun:ssh_connect_host_nonblocking
|
|
}
|
|
|
|
{
|
|
glibc_dlopen_getdelim_selinux
|
|
Memcheck:Leak
|
|
fun:malloc
|
|
fun:getdelim
|
|
obj:/lib64/libselinux.so.1
|
|
fun:call_init
|
|
fun:_dl_init
|
|
obj:/lib64/ld-2.15.so
|
|
}
|
|
|
|
{
|
|
glibc_dlopen_alloc
|
|
Memcheck:Leak
|
|
fun:calloc
|
|
fun:_dlerror_run
|
|
fun:dlopen@@GLIBC_2.2.5
|
|
}
|
|
|
|
### VALGRIND
|
|
{
|
|
valgrind_exit_free_bug
|
|
Memcheck:Free
|
|
fun:free
|
|
fun:__libc_freeres
|
|
fun:_vgnU_freeres
|
|
fun:__run_exit_handlers
|
|
fun:exit
|
|
}
|
|
|
|
|
|
### OPENSSL
|
|
{
|
|
openssl_crypto_value8
|
|
Memcheck:Value8
|
|
fun:*
|
|
obj:/lib*/libcrypto.so*
|
|
}
|
|
|
|
{
|
|
openssl_crypto_value4
|
|
Memcheck:Value4
|
|
fun:*
|
|
obj:/lib*/libcrypto.so*
|
|
}
|
|
|
|
{
|
|
openssl_crypto_cond
|
|
Memcheck:Cond
|
|
fun:*
|
|
obj:/lib*/libcrypto.so*
|
|
}
|
|
|
|
{
|
|
openssl_BN_cond
|
|
Memcheck:Cond
|
|
fun:BN_*
|
|
}
|
|
|
|
{
|
|
openssl_bn_value8
|
|
Memcheck:Value8
|
|
fun:bn_*
|
|
}
|
|
|
|
{
|
|
openssl_bn_value4
|
|
Memcheck:Value4
|
|
fun:bn_*
|
|
}
|
|
|
|
{
|
|
openssl_AES_cond
|
|
Memcheck:Cond
|
|
fun:AES_*
|
|
}
|
|
|
|
{
|
|
openssl_DES_cond
|
|
Memcheck:Cond
|
|
fun:DES_*
|
|
}
|
|
|
|
{
|
|
openssl_DES_value8
|
|
Memcheck:Value8
|
|
fun:DES_*
|
|
}
|
|
|
|
{
|
|
openssl_DES_value4
|
|
Memcheck:Value4
|
|
fun:DES_*
|
|
}
|
|
|
|
{
|
|
openssl_BF_cond
|
|
Memcheck:Cond
|
|
fun:BF_*
|
|
}
|
|
|
|
{
|
|
openssl_SHA1_cond
|
|
Memcheck:Cond
|
|
fun:SHA1_*
|
|
}
|
|
{
|
|
openssl_CRYPTO_leak
|
|
Memcheck:Cond
|
|
fun:OPENSSL_cleanse
|
|
}
|
|
{
|
|
openssl_FIPS_dlopen_leak
|
|
Memcheck:Leak
|
|
match-leak-kinds: reachable
|
|
fun:calloc
|
|
fun:_dlerror_run
|
|
fun:dlopen*
|
|
obj:/lib64/libcrypto.so*
|
|
fun:FIPS_module_mode_set
|
|
fun:FIPS_mode_set
|
|
fun:OPENSSL_init_library
|
|
}
|
|
# Cmocka
|
|
{
|
|
This looks like leak from cmocka when the forked server is not properly terminated
|
|
Memcheck:Leak
|
|
match-leak-kinds: reachable
|
|
fun:calloc
|
|
...
|
|
fun:_cmocka_run_group_tests
|
|
fun:torture_run_tests
|
|
fun:main
|
|
}
|
|
|
|
## libgcrypt
|
|
{
|
|
Reachable allocations from libgcrypt
|
|
Memcheck:Leak
|
|
match-leak-kinds: reachable
|
|
fun:malloc
|
|
...
|
|
fun:gcry_check_version
|
|
fun:ssh_crypto_init
|
|
fun:_ssh_init
|
|
fun:libssh_constructor
|
|
fun:call_init
|
|
fun:__libc_start_main@@GLIBC_2.34
|
|
fun:(below main)
|
|
}
|
|
{
|
|
randomize in libgcrypt keeps some memory around
|
|
Memcheck:Leak
|
|
match-leak-kinds: reachable
|
|
fun:malloc
|
|
...
|
|
fun:_gcry_xmalloc
|
|
fun:_gcry_xcalloc
|
|
fun:initialize.lto_priv.0
|
|
fun:_gcry_rngcsprng_randomize
|
|
fun:ssh_get_random
|
|
...
|
|
}
|
|
{
|
|
EC key operation allocs some reachable memory
|
|
Memcheck:Leak
|
|
match-leak-kinds: reachable
|
|
fun:malloc
|
|
...
|
|
fun:_gcry_xmalloc
|
|
fun:_gcry_mpi_alloc
|
|
fun:_gcry_mpi_scan
|
|
fun:ec_p_init.lto_priv.0
|
|
...
|
|
fun:_gcry_mpi_ec_internal_new
|
|
fun:ecc_sign.lto_priv.0
|
|
fun:_gcry_pk_sign
|
|
fun:gcry_pk_sign
|
|
...
|
|
}
|