add valgrind supression file

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
MergeDate: Thu Jan 29 16:37:37 2026
(Merged from https://github.com/openssl/openssl/pull/29573)

diff --git a/util/valgrind.suppression b/util/valgrind.suppression
new file mode 100644 (file)
index 0000000..f34fce4
--- /dev/null
+++ b/util/valgrind.suppression
@@ -0,0 +1,116 @@
+{
+   reachable_globals_in_libcrypto
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   obj:*/libcrypto.so.*
+}
+{
+   reachable_globals_in_libssl
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   obj:*/libssl.so.*
+}
+{
+   openssl_test_title_reachable
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:set_test_title
+   ...
+}
+
+{
+   reachable_globals_in_openssl_static
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:CRYPTO_*alloc
+   ...
+}
+{
+   reachable_crypto_aligned_alloc
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:CRYPTO_aligned_alloc
+   ...
+}
+{
+   glibc_dl_open_reachable_issue
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:_dl_map_new_object
+   ...
+}
+{
+   glibc_dlopen_reachable_issue
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:_dl_check_map_versions
+   ...
+}
+{
+   glibc_dlopen_reachable_issue
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:_dl_new_object
+   ...
+}
+{
+   glibc_dlopen_reachable_issue
+   Memcheck:Leak
+   match-leak-kinds: reachable
+   ...
+   fun:dl_open_worker
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Value8
+   ...
+   fun:ossl_cipher_generic_stream_update
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   ...
+   fun:ossl_cipher_generic_stream_update
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   fun:EVP_DecryptUpdate
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   ...
+   fun:tls_get_more_records
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   fun:ssl3_read_bytes
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   fun:tls_release_record
+   ...
+}
+{
+   valgrind_confusion_in_asm_code
+   Memcheck:Cond
+   fun:ssl_release_record
+   ...
+}