Bugs item #835873, was opened at 2003-11-04 17:18
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=835873&group_id=976

Category: https
Group: crash
Status: Open
Resolution: None
Priority: 5
Submitted By: Evgeny Sabelsky (evgenys)
Assigned to: Daniel Stenberg (bagder)
Summary: curl-7.10.7 HTTPS isn't thread safe

Initial Comment:
Windows 2000 Pro,
curl-7.10.7 + openssl-0.9.7c

\lib\ssluse.c

#ifdef USE_SSLEAY
/* "global" init done? */
static int init_ssl=0;

/* we have the "SSL is seeded" boolean global for the
application to
   prevent multiple time-consuming seedings in vain */
static bool ssl_seeded = FALSE;
#endif

..............

CURLcode
Curl_SSLConnect(struct connectdata *conn)
...

  if(!ssl_seeded || data->set.ssl.random_file || data-
>set.ssl.egdsocket) {
    /* Make funny stuff to get random input */
    random_the_seed(data);

    ssl_seeded = TRUE;
  }
.....

---------------------------------------------------
If two threads tries to run curl_easy_perform
simultaneously, APP crash at random_the_seed()...

is it possible to move seed initialization to Curl_SSL_init ?

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=835873&group_id=976

-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! Click Here: http://sourceforge.net/donate/
Received on 2003-11-04