Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-20329

S3 engine can crash when libcurl is compiled with OpenSSL < 1.1

Details

    Description

      libMariaS3 uses libcurl underneath. This in-turn uses an SSL library which most commonly is OpenSSL. Certain versions of Linux compile it with OpenSSL 1.0.2 which has a potential race condition in it.

      To resolve this the curl creators recommend adding locking callbacks to OpenSSL. Of course this requires us to know what SSL library Curl was compiled with. Which means once there is a code fix to libMariaS3 there will also need to be a subsequent fix in the S3 engine's build system.

      Attachments

        Activity

          Transition Time In Source Status Execution Times
          Julien Fritsch made transition -
          Open In Progress
          83d 23h 35m 1
          Julien Fritsch made transition -
          In Progress In Review
          1m 9s 1
          Robert Bindar made transition -
          In Review Closed
          143d 21h 38m 1

          People

            robertbindar Robert Bindar
            LinuxJedi Andrew Hutchings (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.