[Pkg-openssl-devel] Bug#534889: libssl0.9.8: int_free_ex_data() is reported as having a race condition

[Russell Coker]

Package: libssl0.9.8
Version: 0.9.8g-15+lenny1
Severity: normal

==6373== Possible data race during read of size 8 at 0x6d2ad28 by thread #4
==6373==    at 0x52D1242: int_free_ex_data (ex_data.c:497)
==6373==    by 0x5318A9D: RSA_free (rsa_lib.c:225)
==6373==    by 0x533A200: EVP_PKEY_free (p_lib.c:479)
==6373==    by 0x40DDDE: SelectorInfo::~SelectorInfo() (dkimverify.cpp:1189)
==6373==    by 0x410946: CDKIMVerify::~CDKIMVerify() (new_allocator.h:118)
==6373==    by 0x4077D7: DKIMVerifyFree (dkim.cpp:223)

Above is the helgrind output from a test run on an AMD64 system.

        if((item = def_get_class(class_index)) == NULL)
                return;
        CRYPTO_r_lock(CRYPTO_LOCK_EX_DATA);
        mx = sk_CRYPTO_EX_DATA_FUNCS_num(item->meth);

The last line of the above code segment is ex_data.c:497.  Maybe if we obtained
a suitable lock before calling def_get_class() then this would be OK.