[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#969018: icecast2 linked with wolfssl has memory leaks on ssl streams



Package: icecast2
Version: 2.4.4-3~bpo10+2
Severity: important
X-Debbugs-Cc: p.golaszewski@task.gda.pl

Dear Maintainer,

I have icecast2 running with many streams. Last time we have switched to
SSL streams (browser started to require it) and it seems to be a
problem. We have noticed huge memory leak, about 1GB/day on 300 streams
average.

After some digging we found who is guilty: libwolfssl.
Rebuild icecast2 with openssl fixes the problem (I can provide package
for tests - build on bullseye)..

We did a lot of tests:
- earlier debian releases
- any package version possible from debian, including testing/unstable.


IMvHO there are 2 solutions:
- fix libwolfssl
- drop libwolfssl and rebuild icecast2 with openssl on Debian

System information below is a fixed version (rebuild with openssl).

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-10-amd64 (SMP w/16 CPU threads)
Kernel taint flags: TAINT_WARN, TAINT_FIRMWARE_WORKAROUND
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages icecast2 depends on:
ii  adduser                3.118
ii  debconf [debconf-2.0]  1.5.74
ii  init-system-helpers    1.58
ii  libc6                  2.31-3
ii  libcurl3-gnutls        7.68.0-1+b1
ii  libogg0                1.3.2-1+b1
ii  libspeex1              1.2~rc1.2-1.1
ii  libssl1.1              1.1.1g-1
ii  libtheora0             1.1.1+dfsg.1-15
ii  libvorbis0a            1.3.6-2
ii  libxml2                2.9.10+dfsg-5+b1
ii  libxslt1.1             1.1.34-4
ii  lsb-base               11.1.0

icecast2 recommends no packages.

Versions of packages icecast2 suggests:
pn  ices2  <none>

-- Configuration Files:
/etc/icecast2/icecast.xml changed [not included]

-- debconf information excluded


Reply to: