blob: 0765cb48ae46c7e14a3fcbc5a7d02acc8de9e349 [file] [log] [blame]
Frédéric Lécaille9b53b4c2018-06-20 07:26:44 +02001# commit 28962c9
2# BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
3#
4# We never saw unexplicated crash with SSL, so I suppose that we are
5# luck, or the slot 0 is always reserved. Anyway the usage of the macro
6# SSL_get_app_data() and SSL_set_app_data() seem wrong. This patch change
7# the deprecated functions SSL_get_app_data() and SSL_set_app_data()
8# by the new functions SSL_get_ex_data() and SSL_set_ex_data(), and
9# it reserves the slot in the SSL memory space.
10#
11# For information, this is the two declaration which seems wrong or
12# incomplete in the OpenSSL ssl.h file. We can see the usage of the
13# slot 0 whoch is hardcoded, but never reserved.
14#
15# #define SSL_set_app_data(s,arg) (SSL_set_ex_data(s,0,(char *)arg))
16# #define SSL_get_app_data(s) (SSL_get_ex_data(s,0))
17
18
19varnishtest "OpenSSL bug: Random crashes"
20feature ignore_unknown_macro
21
22
23haproxy h1 -conf {
24 global
25 tune.ssl.default-dh-param 2048
26 tune.ssl.capture-cipherlist-size 1
27
28 listen frt
29 mode http
30 bind "fd@${frt}" ssl crt ${testdir}/common.pem
31 http-request redirect location /
32} -start
33
Frédéric Lécaille6983be32018-06-22 22:55:07 +020034process p1 "curl -i -k https://${h1_frt_addr}:${h1_frt_port}" -start
35process p2 "curl -i -k https://${h1_frt_addr}:${h1_frt_port}" -start
36process p3 "curl -i -k https://${h1_frt_addr}:${h1_frt_port}" -start
37process p4 "curl -i -k https://${h1_frt_addr}:${h1_frt_port}" -start
38process p5 "curl -i -k https://${h1_frt_addr}:${h1_frt_port}" -start
Frédéric Lécaille9b53b4c2018-06-20 07:26:44 +020039
40process p1 -wait
41process p2 -wait
42process p3 -wait
43process p4 -wait
44process p5 -wait