About multi-thread unsafe for APIs defined in crypto/objects/obj_dat.c
Yun Jiang <[email protected]> Tue, 23 Jan 2018 21:45:12 +0000
| Newsgroups | gmane.comp.encryption.openssl.devel |
|---|---|
| Message-ID | <[email protected]> |
--===============4419618471004241855==
Content-Language: en-GB
Content-Type: multipart/alternative;
boundary="_000_b345caea6be54021b7a2e5482eaffdb2realvnccom_"
--_000_b345caea6be54021b7a2e5482eaffdb2realvnccom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
The APIs defined in the file crypto/objects/obj_dat.c share some static glo=
bal variables defined in the file without locking, which makes the APIs in =
this file not multi-thread safe even if the locking callbacks are set. In a=
ddition, the APIs in this file are also used by the other OpenSSL APIs, whi=
ch makes the following OpenSSL documentation statement invalid (https://www=
.openssl.org/docs/man1.0.2/crypto/threads.html)
"OpenSSL can safely be used in multi-threaded applications provided that at=
least two callback functions are set, locking_function and threadid_func."
Is there any planning to fix this issue?
--_000_b345caea6be54021b7a2e5482eaffdb2realvnccom_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"><!-- P {margin-top:0;margi=
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper" dir=3D"ltr" style=3D"font-size:12pt; color=
:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>The APIs defined in the file <span>crypto/objects/obj_dat.c share&n=
bsp;some static global variables defined in the file without lock=
ing, which makes the APIs in this file not multi-thread safe even if the&nb=
sp;locking callbacks are set. In addition, the APIs in this
file are also used by the other OpenSSL APIs, which makes the following Op=
enSSL documentation statement invalid (<a href=3D"https://www.openssl.org/d=
ocs/man1.0.2/crypto/threads.html" class=3D"OWAAutoLink" id=3D"LPlnk393594" =
previewremoved=3D"true">https://www.openssl.org/docs/man1.0.2/crypto/thread=
s.html</a>)</span></p>
<p><span><br>
</span></p>
<p><span>"<span style=3D"color: rgb(34, 34, 34); font-family: "PT=
Serif", Georgia, Times, "Times New Roman", serif; font-size=
: 18.4px; background-color: rgb(248, 248, 248);">OpenSSL can safely be used=
in multi-threaded applications provided that at least two
callback functions are set, locking_function and threadid_func."</spa=
n></span></p>
<p><br>
</p>
<p>Is there any planning to fix this issue?</p>
<p><br>
</p>
<p><br>
</p>
</div>
</body>
</html>
--_000_b345caea6be54021b7a2e5482eaffdb2realvnccom_--
--===============4419618471004241855==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
--===============4419618471004241855==--