[xmlsec] Memory leak ( Verify Signature using Invalid Transform type)

Aleksey Sanin aleksey at aleksey.com
Fri Aug 30 15:06:47 PDT 2013


Any chance you can send the complete XML file that demonstrates
the problem? Or the exact print-out from the memory leak?

Thanks in advance,

Aleksey

On 8/30/13 11:30 AM, Alexwell Sandro wrote:
> I create enveloping signature of binary file:
> 
> ...
> <ds:Reference Id="myId" URI="#*ObjectId*">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"/>
> </ds:Transforms>
> ...
> <ds:Object Id="*ObjectId*">ghimBgkq</ds:Object>
> ...
> 
> *I edited the file placing a transform (invalid to binary):*
> 
> ...
> <ds:Reference Id="myId" URI="#*ObjectId*">
> <ds:Transforms>
> <ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#base64"/>
> *<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>*
> </ds:Transforms>
> ...
> <ds:Object Id="*ObjectId*">ghimBgkq</ds:Object>
> ...
> 
> When verify occurs memory leak.
> 
> Is related to (at *transforms.c* line 2807)
> *buffer =
> (xmlSecTransformIOBufferPtr)xmlMalloc(sizeof(xmlSecTransformIOBuffer));*
> 
> (at *c14n.c* line 277).
> 
> ...
> *ret = xmlOutputBufferClose(buf);*
> ...
> ret contains the value (-1)
> 
> Is memory leak, or some error in my build?
> 
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> xmlsec mailing list
> xmlsec at aleksey.com
> http://www.aleksey.com/mailman/listinfo/xmlsec
> 


More information about the xmlsec mailing list