Re: [Opensc-devel] ECDSA, engine_pkcs11, libp11 and OpenSSL

[Markus K. <ko...@rr...>]

On 09/22/2013 10:43 AM, Markus Kötter wrote:
> libp11 leaking the ERR strings when unloading the engine:
>
> https://github.com/commonism/libp11/commit/46dacbe8f5badde89d25289faab82232311822b4
> https://github.com/commonism/engine_pkcs11/commit/67244a1cef3decc5b896be5adb9dd771262ab37a
>
> engine_pkcs11 free's the mallocs claimed by PKCS11_ structures.
> https://github.com/commonism/engine_pkcs11/commit/fbae0727e88fd20e1cba6ec60799dc4fe705cf97
>

Combined savings when ...
loading 100 keys

before:
==12577== LEAK SUMMARY:
==12577==    definitely lost: 10,409 bytes in 112 blocks
==12577==    indirectly lost: 705,606 bytes in 14,710 blocks
==12577==      possibly lost: 0 bytes in 0 blocks
==12577==    still reachable: 1,684 bytes in 4 blocks
==12577==         suppressed: 0 bytes in 0 blocks

after:
==11916== LEAK SUMMARY:
==11916==    definitely lost: 7,209 bytes in 112 blocks
==11916==    indirectly lost: 406 bytes in 10 blocks
==11916==      possibly lost: 0 bytes in 0 blocks
==11916==    still reachable: 1,684 bytes in 4 blocks
==11916==         suppressed: 0 bytes in 0 blocks


loading 1000 keys

before:
==12675== LEAK SUMMARY:
==12675==    definitely lost: 82,329 bytes in 1,011 blocks
==12675==    indirectly lost: 7,044,290 bytes in 146,860 blocks
==12675==      possibly lost: 8,196 bytes in 151 blocks
==12675==    still reachable: 1,684 bytes in 4 blocks
==12675==         suppressed: 0 bytes in 0 blocks

after:
==13261== LEAK SUMMARY:
==13261==    definitely lost: 50,409 bytes in 1,012 blocks
==13261==    indirectly lost: 406 bytes in 10 blocks
==13261==      possibly lost: 0 bytes in 0 blocks
==13261==    still reachable: 1,684 bytes in 4 blocks
==13261==         suppressed: 0 bytes in 0 blocks

The remaining leaks are burried in OpenSC itself, and may depend on the 
card used, I used a Feitian PKI Smartcard.


MfG
Markus