Posted to tcl by stevel at Wed Jul 29 01:41:04 GMT 2026view raw

  1. Verification on the new build
  2.  
  3. Your 09:27 install is built from this tree and includes the fix. Traced under
  4. lldb:
  5.  
  6. - TlsLibShutdown  never called 
  7. - BIO_cleanup  never called 
  8. - order is now Tls_Clean (channel closed, BIO freed against a valid vtable) ’
  9. then BIO_meth_free from OpenSSL's atexit 
  10.  
  11. Clean exit, including under MallocScribble heap poisoning, which would have
  12. turned the latent case into a hard crash on the old build.
  13.  
  14. One thing still open from before: your Linux tree is newer than this one
  15. (TlsCloseProc at tlsIO.c:106 vs :77 here, and it has a flush-on-close that
  16. this version lacks). This fix addresses the vtable use-after-free, but I still
  17. can't rule out the second candidate at that same call site  BioCtrl's
  18. BIO_CTRL_FLUSH doing Tcl_WriteRaw() on a parent channel that's already being
  19. torn down. Frames #0/#1 of that Linux trace would settle it.

Add a comment

Please note that this site uses the meta tags nofollow,noindex for all pages that contain comments.
Items are closed for new comments after 1 week