From: Daniel Stenberg <daniel@haxx.se>
Date: Wed, 27 Mar 2024 13:15:11 +0000 (+0100)
Subject: openssl: do not set SSL_MODE_RELEASE_BUFFERS
X-Git-Tag: curl-8_8_0~344
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c247827a8a666ab946db2f6cdd4a277b38147931;p=thirdparty%2Fcurl.git

openssl: do not set SSL_MODE_RELEASE_BUFFERS

While it might save some memory, it causes OpenSSL to instead do a huge
amount of allocations.

Ref: #13136
Closes #13203
---

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index a3953f6c3f..85c43efdb2 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -3565,10 +3565,6 @@ static CURLcode ossl_connect_step1(struct Curl_cfilter *cf,
     return CURLE_OUT_OF_MEMORY;
   }
 
-#ifdef SSL_MODE_RELEASE_BUFFERS
-  SSL_CTX_set_mode(backend->ctx, SSL_MODE_RELEASE_BUFFERS);
-#endif
-
 #ifdef SSL_CTRL_SET_MSG_CALLBACK
   if(data->set.fdebug && data->set.verbose) {
     /* the SSL trace callback is only used for verbose logging */