Bug#845569: exim4-daemon-heavy: Memory leak in callouts (fixed already in official Exim Git repo)

[Heiko Schlittermann (HS12-RIPE)]

Package: exim4-daemon-heavy
Version: 4.84.2-2+deb8u1
Severity: important
Tags: upstream patch

Dear Maintainer,

Current Exim versions have a memory leak when doing callouts via TLS
connections. I can reproduce the problem and I've fixed it.

The fix is already pushed to the upstream repository of Exim (as I'm
one of the Exim developers).

Commit ed62aae3051c9a713d35c8ae516fbd193d1401ba contains the fix.
Commit f57231095d00c7875a2b028e07855f6374abd5cc may be useful as well,
as it fixes a crash that may appear during debugging TLS connections.

I'd be more than happy to update the

    exim-4_84_2+fixes branch

in the official Exim repositories with this patch.


-- Package-specific info:
Exim version 4.84_2 #1 built 25-Jul-2016 18:59:39
Copyright (c) University of Cambridge, 1995 - 2014
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2014
Berkeley DB: Berkeley DB 5.3.28: (September  9, 2013)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS move_frozen_messages Content_Scanning DKIM Old_Demime PRDR OCSP
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /etc/exim4/exim4.conf

-- System Information:
Debian Release: 8.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-0.bpo.1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_DK.utf8, LC_CTYPE=en_DK.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages exim4-daemon-heavy depends on:
ii  debconf [debconf-2.0]  1.5.56
ii  exim4-base             4.84.2-2+deb8u1
ii  libc6                  2.19-18+deb8u6
ii  libdb5.3               5.3.28-9
ii  libgnutls-deb0-28      3.3.8-6+deb8u3
ii  libldap-2.4-2          2.4.40+dfsg-1+deb8u2
ii  libmysqlclient18       5.5.53-0+deb8u1
ii  libpam0g               1.1.8-3.1+deb8u1+b1
ii  libpcre3               2:8.35-3.3+deb8u4
ii  libperl5.20            5.20.2-3+deb8u6
ii  libpq5                 9.4.9-0+deb8u1
ii  libsasl2-2             2.1.26.dfsg1-13+deb8u1
ii  libsqlite3-0           3.8.7.1-1+deb8u2

exim4-daemon-heavy recommends no packages.

exim4-daemon-heavy suggests no packages.

-- debconf information excluded