cURL / Mailing Lists / curl-library / Single Mail

curl-library

abort trap: double-free bug in lib/ssluse.c:Curl_ossl_close() ???

From: Edward B. DREGER <eddy+public+spam_at_noc.everquick.net>
Date: Mon, 16 Apr 2007 15:24:07 +0000 (GMT)

Greetings all,

Quick background:

I've tried various permutations of

* FreeBSD 6.1
* cURL versions 7.15.3, 7.15.5, 7.16.2
* PHP versions 4.4.4, 4.4.6, 4-STABLE-200704160230, 5.1.6
* OpenSSL versions 0.9.8b, 0.9.8d, 0.9.8e.

Clean builds from source, ldd indicates that there's no library confusion, et
cetera.

The problem:

When PHP invokes cURL on an HTTPS URL, the result is

         php in free(): error: chunk is already free
         Abort trap: 6

I'm aware of the curl-and-php mailing list. However, it appears the problem
may be in libcurl as opposed to the PHP/CURL binding. I built libcurl and PHP
with debugging symbols and found that the trap occurs in
cURL's

         lib/ssluse.c:Curl_ossl_close()

when

         SSL_free (connssl->handle);
         /* circa line 700 +/- 20 (depending on cURL version) */

is invoked. I'm not terribly familiar with cURL or OpenSSL guts, so that's as
far as I've taken it.

Any suggestions?

TIA,
Eddy

--
Everquick Internet - http://www.everquick.net/
A division of Brotsman & Dreger, Inc. - http://www.brotsman.com/
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
________________________________________________________________________
DO NOT send mail to the following addresses:
davidc_at_brics.com -*- jfconmaapaq_at_intc.net -*- sam_at_everquick.net
Sending mail to spambait addresses is a great way to get blocked.
Ditto for broken OOO autoresponders and foolish AV software backscatter.
Received on 2007-04-16