memleak (Re: GnuTLS 2.9.3)

[Daiki Ueno]

>>>>> In <edd1458f-9bfd-4282-9aa6-22d15d61aabe at broken.deisui.org> 
>>>>>	Daiki Ueno <ueno at unixuser.org> wrote:
> Now I run make check and found several memleaks.  One is in
> cdk_keydb_get_pk, and others are in tests (including session ticket
> test...sorry).

...and yet another one is in libgcrypt.  It seems that dsa_generate_ext
does not release the factors array after copying its elements to modern
r_extrainfo.

It can be reproduced with:

$ valgrind --leak-check=full ./cve-2009-1416

in gnutls/tests/.

Here is a fix:

-------------- next part --------------
A non-text attachment was scrubbed...
Name: memleak.diff
Type: text/x-diff
Size: 407 bytes
Desc: not available
URL: </pipermail/attachments/20090820/32b7a49d/attachment.diff>
-------------- next part --------------

Regards,
-- 
Daiki Ueno