[krbdev.mit.edu #6413] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Apr 15 13:01:13 EDT 2014


In PKINIT, use library initializer for OpenSSL

Use a library initializer to prevent multiple threads using PKINIT
from concurently initializing OpenSSL functions.  For cases where
MT-safety is not assured by registering OpenSSL locking callbacks,
this significantly lowers the odds of crashes caused by races in
OpenSSL initialization.  (If OpenSSL initialization functions are
called by some other thread directly, crashes are still possible.)

[ghudson at mit.edu: simplify code changes and commit message]

https://github.com/krb5/krb5/commit/d49e9f0e14adb24e6fe129080c54a0571a39611b
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: d49e9f0e14adb24e6fe129080c54a0571a39611b
Branch: master
 src/plugins/preauth/pkinit/pkinit_crypto_openssl.c |   25 ++++++++------------
 1 files changed, 10 insertions(+), 15 deletions(-)



More information about the krb5-bugs mailing list