The latest ocserv cannot work well with IOS Anyconnect using profile.xml

Yick Xie yick.xie at gmail.com
Mon Dec 21 10:46:57 PST 2015


Hi Nikos,

Please check my log.

valgrind --leak-check=full ocserv -c /etc/ocserv/config -d 4 -f
==9214== Memcheck, a memory error detector
==9214== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
==9214== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
==9214== Command: ocserv -c /etc/ocserv/config -d 4 -f
==9214==
Setting 'radius' as primary authentication method
Enabling 'certificate' as authentication method
listening (TCP) on 0.0.0.0:443...
listening (UDP) on 0.0.0.0:443...
ocserv[9214]: main: initializing control unix socket: /var/run/occtl.socket
ocserv[9214]: main: initialized ocserv 0.11.0
ocserv[9215]: sec-mod: reading supplemental config from radius
ocserv[9215]: sec-mod: sec-mod initialized (socket: /var/run/ocserv-socket.9214)
ocserv[9215]: sec-mod: received request from pid 9214 and uid 0
ocserv[9215]: sec-mod: cmd [size=55] sm: sign
ocserv[9214]: main: processed 1 CA certificate(s)
ocserv[9216]: worker:  accepted connection
ocserv[9216]: worker:  client certificate verification succeeded
ocserv[9215]: sec-mod: received request from pid 9216 and uid 65534
ocserv[9215]: sec-mod: cmd [size=261] sm: decrypt
ocserv[9215]: sec-mod: received request from pid 9216 and uid 65534
ocserv[9216]: worker:  sending message 'resume data store request' to secmod
ocserv[9215]: sec-mod: cmd [size=1220] resume data store request
ocserv[9216]: worker:  TLS handshake completedocserv[9215]: sec-mod:
TLS session DB storing
f67fcb6193a7d8c4df649cd2db4534b96f6b13d4c66f8386d64d4cd829eab982
ocserv[9216]: worker:  sending message 'session info' to main
ocserv[9214]: main: 1xx.9x.1x.7x:49621 main received message 'session
info' of 6 bytes

ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: User-Agent:
AnyConnect AppleSSLVPN_Darwin_ARM (iPhone) 4.0.03016
ocserv[9216]: worker: 1xx.9x.1x.7x User-agent: 'AnyConnect
AppleSSLVPN_Darwin_ARM (iPhone) 4.0.'
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Host: 1**.8*.1**.2*:443
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Accept: */*
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Accept-Encoding: identity
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: X-Transcend-Version: 1
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: X-Transcend-Version: 1
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-ClientVersion: 4.0.03016
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Platform: apple-ios
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-PlatformVersion: 7.1.2
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-DeviceType: iPhone4,1
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-UniqueID:
55307d20b7d8b69b04f3d9a99f5d06d72e3b384b
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-MacAddress: unknown
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-Imei: UNKNOWN:unknown
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: X-Aggregate-Auth: 1
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Connection: close
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Content-Length: 476
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP processing: Content-Type:
application/x-www-form-urlencoded
ocserv[9216]: worker: 1xx.9x.1x.7x HTTP POST /
ocserv[9216]: worker: 1xx.9x.1x.7x POST body: '<?xml version="1.0"
encoding="UTF-8"?>
<config-auth client="vpn" type="init">
<device-id platform-version="7.1.2" device-type="iPhone4,1"
unique-id="55307d20b7d8b69b04f3d9a99f5d06d72e3b384b">apple-ios</device-id>
<phone-id>UNKNOWN:unknown</phone-id>
<mac-address-list>
<mac-address>unknown</mac-address></mac-address-list>
<version who="vpn">4.0.03016</version>
<group-select>admin-global</group-select>
<group-access>https://1**.8*.1**.2*:443/</group-access>
</config-auth>
'
ocserv[9215]: sec-mod: received request from pid 9216 and uid 65534
ocserv[9216]: worker: 1xx.9x.1x.7x sending message 'sm: auth init' to secmod
ocserv[9215]: sec-mod: cmd [size=59] sm: auth init
ocserv[9215]: sec-mod: using 'certificate' authentication to
authenticate user (session: 18ige)
ocserv[9215]: sec-mod: auth init (with cert) for user 'admin'
(session: 18ige) of group: '' from '1xx.9x.1x.7x'
ocserv[9216]: worker: 1xx.9x.1x.7x received auth reply message (value: 1)
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x user 'admin' obtained cookie
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP sending: 200 OK
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x sent sid: 18igex4CiArQvynqGWqF/Q==
ocserv[9217]: worker:  accepted connection
ocserv[9217]: worker:  tlslib.c:379: no certificate was found
ocserv[9215]: sec-mod: received request from pid 9217 and uid 65534
ocserv[9215]: sec-mod: cmd [size=261] sm: decrypt
ocserv[9215]: sec-mod: received request from pid 9217 and uid 65534
ocserv[9217]: worker:  sending message 'resume data store request' to secmod
ocserv[9215]: sec-mod: cmd [size=355] resume data store request
ocserv[9215]: sec-mod: TLS session DB storing
7a9ea295929f633e96efd66fa63aa836897145541149f2bc264107f0e67b9ce5
ocserv[9217]: worker:  TLS handshake completed
ocserv[9217]: worker:  sending message 'session info' to main
ocserv[9214]: main: 1xx.9x.1x.7x:49622 main received message 'session
info' of 6 bytes
ocserv[9217]: worker: 1xx.9x.1x.7x HTTP processing: User-Agent:
AnyConnect ERROR_NOT_USED 4.0.03016
ocserv[9217]: worker: 1xx.9x.1x.7x User-agent: 'AnyConnect
ERROR_NOT_USED 4.0.03016'
ocserv[9217]: worker: 1xx.9x.1x.7x HTTP processing: Host: 1**.8*.1**.2*:443
ocserv[9217]: worker: 1xx.9x.1x.7x HTTP processing: Accept: */*
ocserv[9217]: worker: 1xx.9x.1x.7x HTTP processing: Cookie: (censored)
ocserv[9217]: worker: 1xx.9x.1x.7x HTTP GET /profiles//etc/ocserv/profile.xml
ocserv[9217]: worker: 1xx.9x.1x.7x requested config:
/profiles//etc/ocserv/profile.xml
==9217== Invalid read of size 8
==9217==    at 0x42671B: get_config_handler (worker-http-handlers.c:51)
==9217==    by 0x40C26A: vpn_server (worker-vpn.c:534)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x409DB4: main (main.c:1342)
==9217==  Address 0xa0 is not stack'd, malloc'd or (recently) free'd
==9217==
==9217==
==9217== Process terminating with default action of signal 11 (SIGSEGV)
==9217==  Access not within mapped region at address 0xA0
==9217==    at 0x42671B: get_config_handler (worker-http-handlers.c:51)
==9217==    by 0x40C26A: vpn_server (worker-vpn.c:534)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x409DB4: main (main.c:1342)
==9217==  If you believe this happened as a result of a stack
==9217==  overflow in your program's main thread (unlikely but
==9217==  possible), you can try to increase the size of the
==9217==  main thread stack using the --main-stacksize= flag.
==9217==  The main thread stack size used in this run was 8388608.
==9217== Invalid free() / delete / delete[] / realloc()
==9217==    at 0x4C2BD57: free (vg_replace_malloc.c:530)
==9217==    by 0x679B5AB: __libc_freeres (in /lib/x86_64-linux-gnu/libc-2.19.so)
==9217==    by 0x4A256B1: _vgnU_freeres (vg_preloaded.c:65)
==9217==    by 0xFFEFFFA3F: ???
==9217==    by 0x40C26A: vpn_server (worker-vpn.c:534)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x409DB4: main (main.c:1342)
==9217==  Address 0x69f43c0 is 0 bytes inside data symbol "noai6ai_cached"
==9217==
==9217==
==9217== HEAP SUMMARY:
==9217==     in use at exit: 203,277 bytes in 1,041 blocks
==9217==   total heap usage: 3,370 allocs, 2,330 frees, 1,123,308
bytes allocated
==9217==
==9217== 80 bytes in 1 blocks are possibly lost in loss record 40 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444D4A: talloc_enable_null_tracking (talloc.c:1231)
==9217==    by 0x44424F: talloc_init (talloc.c:786)
==9217==    by 0x409512: main (main.c:1161)
==9217==
==9217== 80 bytes in 1 blocks are possibly lost in loss record 41 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44425E: talloc_init (talloc.c:788)
==9217==    by 0x409512: main (main.c:1161)
==9217==
==9217== 80 bytes in 1 blocks are possibly lost in loss record 42 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x4440AC: talloc_named (talloc.c:724)
==9217==    by 0x4099F9: main (main.c:1273)
==9217==
==9217== 84 bytes in 1 blocks are possibly lost in loss record 43 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9217==    by 0x41F7E4: parse_cfg_file (config.c:756)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 85 bytes in 1 blocks are possibly lost in loss record 44 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x4450BF: talloc_vasprintf (talloc.c:1376)
==9217==    by 0x443F41: talloc_set_name_v (talloc.c:4431)
==9217==    by 0x4442C3: talloc_init (talloc.c:792)
==9217==    by 0x409512: main (main.c:1161)
==9217==
==9217== 87 bytes in 1 blocks are possibly lost in loss record 45 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x41DC29: figure_auth_funcs (config.c:412)
==9217==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 87 bytes in 1 blocks are possibly lost in loss record 46 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x4450BF: talloc_vasprintf (talloc.c:1376)
==9217==    by 0x443F41: talloc_set_name_v (talloc.c:4431)
==9217==    by 0x444116: talloc_named (talloc.c:729)
==9217==    by 0x4099F9: main (main.c:1273)
==9217==
==9217== 88 bytes in 1 blocks are possibly lost in loss record 47 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x420460: parse_cfg_file (config.c:798)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 89 bytes in 1 blocks are possibly lost in loss record 49 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x423328: parse_cfg_file (config.c:949)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 89 bytes in 1 blocks are possibly lost in loss record 50 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x42594B: add_multi_line_val (config.c:1338)
==9217==    by 0x4241EC: parse_cfg_file (config.c:1029)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 92 bytes in 1 blocks are possibly lost in loss record 51 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x41DE9B: figure_auth_funcs (config.c:443)
==9217==    by 0x41E7F4: parse_cfg_file (config.c:688)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 94 bytes in 1 blocks are possibly lost in loss record 52 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x42342B: parse_cfg_file (config.c:953)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 96 bytes in 1 blocks are possibly lost in loss record 54 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9217==    by 0x435B94: radius_get_brackets_string (subconfig.c:215)
==9217==    by 0x41DB2C: figure_auth_funcs (config.c:401)
==9217==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 102 bytes in 1 blocks are possibly lost in loss record 55 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x41F60A: parse_cfg_file (config.c:740)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 103 bytes in 1 blocks are possibly lost in loss record 56 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x41F527: parse_cfg_file (config.c:739)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 104 bytes in 1 blocks are possibly lost in loss record 57 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x41F284: parse_cfg_file (config.c:734)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 104 bytes in 1 blocks are possibly lost in loss record 58 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x4201D4: parse_cfg_file (config.c:793)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 107 bytes in 1 blocks are possibly lost in loss record 59 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x42594B: add_multi_line_val (config.c:1338)
==9217==    by 0x41EEE6: parse_cfg_file (config.c:730)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 108 bytes in 1 blocks are possibly lost in loss record 60 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x42594B: add_multi_line_val (config.c:1338)
==9217==    by 0x41EE12: parse_cfg_file (config.c:729)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 116 bytes in 1 blocks are possibly lost in loss record 61 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x43592E: expand_brackets_string (subconfig.c:95)
==9217==    by 0x435CA6: radius_get_brackets_string (subconfig.c:235)
==9217==    by 0x41DB2C: figure_auth_funcs (config.c:401)
==9217==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 121 bytes in 1 blocks are possibly lost in loss record 62 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x417A73: calc_sha1_hash (tlslib.c:844)
==9217==    by 0x425119: check_cfg (config.c:1126)
==9217==    by 0x4254E9: cmd_parser (config.c:1186)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 121 bytes in 1 blocks are possibly lost in loss record 63 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x417A73: calc_sha1_hash (tlslib.c:844)
==9217==    by 0x425176: check_cfg (config.c:1130)
==9217==    by 0x4254E9: cmd_parser (config.c:1186)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 161 bytes in 1 blocks are possibly lost in loss record 66 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x427BB7: header_value_check (worker-http.c:366)
==9217==    by 0x428292: http_header_complete_cb (worker-http.c:536)
==9217==    by 0x5BE1A85: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9217==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x409DB4: main (main.c:1342)
==9217==
==9217== 183 bytes in 1 blocks are possibly lost in loss record 67 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9217==    by 0x421BFB: parse_cfg_file (config.c:870)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 200 bytes in 1 blocks are possibly lost in loss record 70 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x416DF1: load_cert_files (tlslib.c:652)
==9217==    by 0x4171CA: tls_load_certs (tlslib.c:705)
==9217==    by 0x40995F: main (main.c:1263)
==9217==
==9217== 209 bytes in 1 blocks are possibly lost in loss record 72 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x444529: _talloc_realloc (talloc.c:909)
==9217==    by 0x43C578: str_append_size (str.c:74)
==9217==    by 0x43C62C: str_append_data (str.c:94)
==9217==    by 0x42807F: http_header_field_cb (worker-http.c:488)
==9217==    by 0x5BE2834: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9217==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==
==9217== 209 bytes in 1 blocks are possibly lost in loss record 73 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444468: talloc_named_const (talloc.c:861)
==9217==    by 0x444529: _talloc_realloc (talloc.c:909)
==9217==    by 0x43C578: str_append_size (str.c:74)
==9217==    by 0x43C62C: str_append_data (str.c:94)
==9217==    by 0x428246: http_header_value_cb (worker-http.c:523)
==9217==    by 0x5BE2E48: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9217==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==
==9217== 456 bytes in 1 blocks are possibly lost in loss record 84 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9217==    by 0x425380: cmd_parser (config.c:1161)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 744 bytes in 1 blocks are possibly lost in loss record 87 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9217==    by 0x41F792: parse_cfg_file (config.c:749)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 848 bytes in 1 blocks are possibly lost in loss record 90 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x445423: _talloc_array (talloc.c:1476)
==9217==    by 0x42587C: add_multi_line_val (config.c:1321)
==9217==    by 0x41EE12: parse_cfg_file (config.c:729)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 848 bytes in 1 blocks are possibly lost in loss record 91 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x445423: _talloc_array (talloc.c:1476)
==9217==    by 0x42587C: add_multi_line_val (config.c:1321)
==9217==    by 0x41EEE6: parse_cfg_file (config.c:730)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 848 bytes in 1 blocks are possibly lost in loss record 92 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x445423: _talloc_array (talloc.c:1476)
==9217==    by 0x42587C: add_multi_line_val (config.c:1321)
==9217==    by 0x4241EC: parse_cfg_file (config.c:1029)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 1,872 bytes in 1 blocks are possibly lost in loss record 103 of 113
==9217==    at 0x4C2CB8A: realloc (vg_replace_malloc.c:785)
==9217==    by 0x4445E2: _talloc_realloc (talloc.c:936)
==9217==    by 0x4454E5: _talloc_realloc_array (talloc.c:1503)
==9217==    by 0x4258FB: add_multi_line_val (config.c:1332)
==9217==    by 0x423BD3: parse_cfg_file (config.c:1011)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 8,192 bytes in 1 blocks are definitely lost in loss record 109 of 113
==9217==    at 0x4C2CD6C: memalign (vg_replace_malloc.c:858)
==9217==    by 0x4C2CE31: posix_memalign (vg_replace_malloc.c:1021)
==9217==    by 0x42AE2D: ocsigaltstack (worker-misc.c:228)
==9217==    by 0x40B856: vpn_server (worker-vpn.c:398)
==9217==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9217==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9217==    by 0x409DB4: main (main.c:1342)
==9217==
==9217== 20,276 bytes in 196 blocks are possibly lost in loss record 111 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9217==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9217==    by 0x42594B: add_multi_line_val (config.c:1338)
==9217==    by 0x423BD3: parse_cfg_file (config.c:1011)
==9217==    by 0x4254DA: cmd_parser (config.c:1184)
==9217==    by 0x409695: main (main.c:1198)
==9217==
==9217== 34,784 bytes in 1 blocks are possibly lost in loss record 112 of 113
==9217==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9217==    by 0x4431D8: __talloc (talloc.c:290)
==9217==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9217==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9217==    by 0x409A42: main (main.c:1279)
==9217==
==9217== LEAK SUMMARY:
==9217==    definitely lost: 8,192 bytes in 1 blocks
==9217==    indirectly lost: 0 bytes in 0 blocks
==9217==      possibly lost: 63,755 bytes in 230 blocks
==9217==    still reachable: 131,330 bytes in 810 blocks
==9217==         suppressed: 0 bytes in 0 blocks
==9217== Reachable blocks (those to which a pointer was found) are not shown.
==9217== To see them, rerun with: --leak-check=full --show-leak-kinds=all
==9217==
==9217== For counts of detected and suppressed errors, rerun with: -v
==9217== ERROR SUMMARY: 38 errors from 38 contexts (suppressed: 0 from 0)
ocserv[9214]: main: 1xx.9x.1x.7x:49622 command socket closed
ocserv[9214]: main: 1xx.9x.1x.7x:49622 user disconnected (reason:
unspecified, rx: 0, tx: 0)
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: User-Agent:
AnyConnect AppleSSLVPN_Darwin_ARM (iPhone) 4.0.03016
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x User-agent: 'AnyConnect
AppleSSLVPN_Darwin_ARM (iPhone) 4.0.'
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: Host:
1**.8*.1**.2*:443
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: Accept: */*
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
Accept-Encoding: identity
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: Cookie: (censored)
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x received sid: 18igex4CiArQvynqGWqF/Q==
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-Transcend-Version: 1
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-Transcend-Version: 1
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-ClientVersion: 4.0.03016
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Platform: apple-ios
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-PlatformVersion: 7.1.2
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-DeviceType: iPhone4,1
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-UniqueID:
55307d20b7d8b69b04f3d9a99f5d06d72e3b384b
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-MacAddress: unknown
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing:
X-AnyConnect-Identifier-Device-Imei: UNKNOWN:unknown
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: X-Aggregate-Auth: 1
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP processing: Cookie: (censored)
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP GET //logout
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x HTTP sending: 200 OK
ocserv[9216]: worker[admin]: 1xx.9x.1x.7x sent sid: 18igex4CiArQvynqGWqF/Q==
==9216== Invalid free() / delete / delete[] / realloc()
==9216==    at 0x4C2BD57: free (vg_replace_malloc.c:530)
==9216==    by 0x679B5AB: __libc_freeres (in /lib/x86_64-linux-gnu/libc-2.19.so)
==9216==    by 0x4A256B1: _vgnU_freeres (vg_preloaded.c:65)
==9216==    by 0x667221A: __run_exit_handlers (exit.c:97)
==9216==    by 0x66722A4: exit (exit.c:104)
==9216==    by 0x409117: listen_watcher_cb (main.c:1062)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==  Address 0x69f43c0 is 0 bytes inside data symbol "noai6ai_cached"
==9216==
==9216==
==9216== HEAP SUMMARY:
==9216==     in use at exit: 196,616 bytes in 1,028 blocks
==9216==   total heap usage: 5,075 allocs, 4,048 frees, 1,915,720
bytes allocated
==9216==
==9216== 80 bytes in 1 blocks are possibly lost in loss record 32 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444D4A: talloc_enable_null_tracking (talloc.c:1231)
==9216==    by 0x44424F: talloc_init (talloc.c:786)
==9216==    by 0x409512: main (main.c:1161)
==9216==
==9216== 80 bytes in 1 blocks are possibly lost in loss record 33 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44425E: talloc_init (talloc.c:788)
==9216==    by 0x409512: main (main.c:1161)
==9216==
==9216== 80 bytes in 1 blocks are possibly lost in loss record 34 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x4440AC: talloc_named (talloc.c:724)
==9216==    by 0x4099F9: main (main.c:1273)
==9216==
==9216== 84 bytes in 1 blocks are possibly lost in loss record 35 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9216==    by 0x41F7E4: parse_cfg_file (config.c:756)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 85 bytes in 1 blocks are possibly lost in loss record 36 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x4450BF: talloc_vasprintf (talloc.c:1376)
==9216==    by 0x443F41: talloc_set_name_v (talloc.c:4431)
==9216==    by 0x4442C3: talloc_init (talloc.c:792)
==9216==    by 0x409512: main (main.c:1161)
==9216==
==9216== 87 bytes in 1 blocks are possibly lost in loss record 37 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x41DC29: figure_auth_funcs (config.c:412)
==9216==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 87 bytes in 1 blocks are possibly lost in loss record 38 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x4450BF: talloc_vasprintf (talloc.c:1376)
==9216==    by 0x443F41: talloc_set_name_v (talloc.c:4431)
==9216==    by 0x444116: talloc_named (talloc.c:729)
==9216==    by 0x4099F9: main (main.c:1273)
==9216==
==9216== 88 bytes in 1 blocks are possibly lost in loss record 39 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x420460: parse_cfg_file (config.c:798)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 89 bytes in 1 blocks are possibly lost in loss record 41 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x423328: parse_cfg_file (config.c:949)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 89 bytes in 1 blocks are possibly lost in loss record 42 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x42594B: add_multi_line_val (config.c:1338)
==9216==    by 0x4241EC: parse_cfg_file (config.c:1029)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 92 bytes in 1 blocks are possibly lost in loss record 43 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x41DE9B: figure_auth_funcs (config.c:443)
==9216==    by 0x41E7F4: parse_cfg_file (config.c:688)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 94 bytes in 1 blocks are possibly lost in loss record 44 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x42342B: parse_cfg_file (config.c:953)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 96 bytes in 1 blocks are possibly lost in loss record 46 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9216==    by 0x435B94: radius_get_brackets_string (subconfig.c:215)
==9216==    by 0x41DB2C: figure_auth_funcs (config.c:401)
==9216==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 102 bytes in 1 blocks are possibly lost in loss record 47 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x41F60A: parse_cfg_file (config.c:740)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 103 bytes in 1 blocks are possibly lost in loss record 48 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x41F527: parse_cfg_file (config.c:739)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 104 bytes in 1 blocks are possibly lost in loss record 49 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x41F284: parse_cfg_file (config.c:734)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 104 bytes in 1 blocks are possibly lost in loss record 50 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x4201D4: parse_cfg_file (config.c:793)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 107 bytes in 1 blocks are possibly lost in loss record 51 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x42594B: add_multi_line_val (config.c:1338)
==9216==    by 0x41EEE6: parse_cfg_file (config.c:730)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 108 bytes in 1 blocks are possibly lost in loss record 52 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x42594B: add_multi_line_val (config.c:1338)
==9216==    by 0x41EE12: parse_cfg_file (config.c:729)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 116 bytes in 1 blocks are possibly lost in loss record 53 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x43592E: expand_brackets_string (subconfig.c:95)
==9216==    by 0x435CA6: radius_get_brackets_string (subconfig.c:235)
==9216==    by 0x41DB2C: figure_auth_funcs (config.c:401)
==9216==    by 0x41E6F4: parse_cfg_file (config.c:683)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 121 bytes in 1 blocks are possibly lost in loss record 54 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x417A73: calc_sha1_hash (tlslib.c:844)
==9216==    by 0x425119: check_cfg (config.c:1126)
==9216==    by 0x4254E9: cmd_parser (config.c:1186)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 121 bytes in 1 blocks are possibly lost in loss record 55 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x417A73: calc_sha1_hash (tlslib.c:844)
==9216==    by 0x425176: check_cfg (config.c:1130)
==9216==    by 0x4254E9: cmd_parser (config.c:1186)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 161 bytes in 1 blocks are possibly lost in loss record 58 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x4131F2: recv_auth_reply (worker-auth.c:731)
==9216==    by 0x41503D: post_auth_handler (worker-auth.c:1453)
==9216==    by 0x40C50C: vpn_server (worker-vpn.c:564)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==
==9216== 161 bytes in 1 blocks are possibly lost in loss record 59 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x427BB7: header_value_check (worker-http.c:366)
==9216==    by 0x428041: http_header_field_cb (worker-http.c:483)
==9216==    by 0x5BE2834: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9216==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==
==9216== 183 bytes in 1 blocks are possibly lost in loss record 60 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x444FE8: talloc_strndup (talloc.c:1351)
==9216==    by 0x421BFB: parse_cfg_file (config.c:870)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 200 bytes in 1 blocks are possibly lost in loss record 62 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x416DF1: load_cert_files (tlslib.c:652)
==9216==    by 0x4171CA: tls_load_certs (tlslib.c:705)
==9216==    by 0x40995F: main (main.c:1263)
==9216==
==9216== 209 bytes in 1 blocks are possibly lost in loss record 64 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x444529: _talloc_realloc (talloc.c:909)
==9216==    by 0x43C578: str_append_size (str.c:74)
==9216==    by 0x43C62C: str_append_data (str.c:94)
==9216==    by 0x42807F: http_header_field_cb (worker-http.c:488)
==9216==    by 0x5BE2834: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9216==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==
==9216== 456 bytes in 1 blocks are possibly lost in loss record 71 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9216==    by 0x425380: cmd_parser (config.c:1161)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 557 bytes in 1 blocks are possibly lost in loss record 73 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444468: talloc_named_const (talloc.c:861)
==9216==    by 0x444529: _talloc_realloc (talloc.c:909)
==9216==    by 0x42839D: http_body_cb (worker-http.c:565)
==9216==    by 0x5BE16D0: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9216==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==
==9216== 586 bytes in 1 blocks are possibly lost in loss record 74 of 100
==9216==    at 0x4C2CB8A: realloc (vg_replace_malloc.c:785)
==9216==    by 0x4445E2: _talloc_realloc (talloc.c:936)
==9216==    by 0x43C578: str_append_size (str.c:74)
==9216==    by 0x43C62C: str_append_data (str.c:94)
==9216==    by 0x428246: http_header_value_cb (worker-http.c:523)
==9216==    by 0x5BE2E48: http_parser_execute (in
/usr/lib/x86_64-linux-gnu/libhttp_parser.so.2.1)
==9216==    by 0x40C14F: vpn_server (worker-vpn.c:518)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==
==9216== 744 bytes in 1 blocks are possibly lost in loss record 76 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9216==    by 0x41F792: parse_cfg_file (config.c:749)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 848 bytes in 1 blocks are possibly lost in loss record 79 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x445423: _talloc_array (talloc.c:1476)
==9216==    by 0x42587C: add_multi_line_val (config.c:1321)
==9216==    by 0x41EE12: parse_cfg_file (config.c:729)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 848 bytes in 1 blocks are possibly lost in loss record 80 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x445423: _talloc_array (talloc.c:1476)
==9216==    by 0x42587C: add_multi_line_val (config.c:1321)
==9216==    by 0x41EEE6: parse_cfg_file (config.c:730)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 848 bytes in 1 blocks are possibly lost in loss record 81 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x445423: _talloc_array (talloc.c:1476)
==9216==    by 0x42587C: add_multi_line_val (config.c:1321)
==9216==    by 0x4241EC: parse_cfg_file (config.c:1029)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 1,872 bytes in 1 blocks are possibly lost in loss record 91 of 100
==9216==    at 0x4C2CB8A: realloc (vg_replace_malloc.c:785)
==9216==    by 0x4445E2: _talloc_realloc (talloc.c:936)
==9216==    by 0x4454E5: _talloc_realloc_array (talloc.c:1503)
==9216==    by 0x4258FB: add_multi_line_val (config.c:1332)
==9216==    by 0x423BD3: parse_cfg_file (config.c:1011)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 8,192 bytes in 1 blocks are definitely lost in loss record 96 of 100
==9216==    at 0x4C2CD6C: memalign (vg_replace_malloc.c:858)
==9216==    by 0x4C2CE31: posix_memalign (vg_replace_malloc.c:1021)
==9216==    by 0x42AE2D: ocsigaltstack (worker-misc.c:228)
==9216==    by 0x40B856: vpn_server (worker-vpn.c:398)
==9216==    by 0x40910D: listen_watcher_cb (main.c:1061)
==9216==    by 0x6227E44: ev_invoke_pending (in
/usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
==9216==    by 0x409DB4: main (main.c:1342)
==9216==
==9216== 20,276 bytes in 196 blocks are possibly lost in loss record 98 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444E3A: _talloc_memdup (talloc.c:1288)
==9216==    by 0x444EAA: talloc_strdup (talloc.c:1307)
==9216==    by 0x42594B: add_multi_line_val (config.c:1338)
==9216==    by 0x423BD3: parse_cfg_file (config.c:1011)
==9216==    by 0x4254DA: cmd_parser (config.c:1184)
==9216==    by 0x409695: main (main.c:1198)
==9216==
==9216== 34,784 bytes in 1 blocks are possibly lost in loss record 99 of 100
==9216==    at 0x4C2AC3D: malloc (vg_replace_malloc.c:299)
==9216==    by 0x4431D8: __talloc (talloc.c:290)
==9216==    by 0x44337E: _talloc_named_const (talloc.c:347)
==9216==    by 0x444DD4: _talloc_zero (talloc.c:1270)
==9216==    by 0x409A42: main (main.c:1279)
==9216==
==9216== LEAK SUMMARY:
==9216==    definitely lost: 8,192 bytes in 1 blocks
==9216==    indirectly lost: 0 bytes in 0 blocks
==9216==      possibly lost: 64,850 bytes in 232 blocks
==9216==    still reachable: 123,574 bytes in 795 blocks
==9216==         suppressed: 0 bytes in 0 blocks
==9216== Reachable blocks (those to which a pointer was found) are not shown.
==9216== To see them, rerun with: --leak-check=full --show-leak-kinds=all
==9216==
==9216== For counts of detected and suppressed errors, rerun with: -v
==9216== ERROR SUMMARY: 39 errors from 39 contexts (suppressed: 0 from 0)
ocserv[9214]: main: 1xx.9x.1x.7x:49621 command socket closed
ocserv[9214]: main: 1xx.9x.1x.7x:49621 user disconnected (reason:
unspecified, rx: 0, tx: 0)

2015-12-21 15:36 GMT+08:00 Nikos Mavrogiannopoulos
<n.mavrogiannopoulos at gmail.com>:
> On Sun, Dec 20, 2015 at 10:02 PM, Yick Xie <yick.xie at gmail.com> wrote:
>> Hi Nikos,
>>
>> Sorry, I don't know how to use valgrind 3.11.0, which always showed
>> some errors even as I just ran safe ocserv 0.10.8 .
>> GCC version is:
>> gcc (Ubuntu 4.8.4-2ubuntu1~14.04) 4.8.4
>> valgrind ocserv -c /etc/ocserv/config -f
>> ==5112== Memcheck, a memory error detector
>> ==5112== Copyright (C) 2002-2015, and GNU GPL'd, by Julian Seward et al.
>> ==5112== Using Valgrind-3.11.0 and LibVEX; rerun with -h for copyright info
>> ==5112== Command: ocserv -c /etc/ocserv/config -f
>
> I forgot to mention that you need to set isolate-workers to false to
> be able to run valgrind. After setting that, it should run normally.
>
> regards,
> Nikos



More information about the openconnect-devel mailing list