On Thu, 6 Sep 2001, T. Bharath wrote:

> The problem is with this loop in
> int Curl_SSL_Close_All(struct SessionHandle *data)
> {
> int i;
> for(i=0; i< data->set.ssl.numsessions; i++)
> /* the single-killer function handles empty table slots */
> Kill_Single_Session(&data->set.ssl.session[i]);
>
> /* free the cache data */
> free(data->set.ssl.session);
>
> return 0;
> }
>
> data->set.ssl.numsessions is preset to 5 so even if data->set.ssl.session
> is not valid it invokes Kill_Single_Session five times with an invalid
> pointer causing the crash.

Ah, you mean that the set.ssl.session is a NULL pointer in this case?

> I think we need to put a check there

I added this check:

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/curl/curl/lib/ssluse.c.diff?r1=1.30&r2=1.31

Thanks a lot for the report!

-- 
    Daniel Stenberg -- curl groks URLs -- http://curl.haxx.se/