{"action":"closed","issue":{"url":"https://api.github.com/repos/libressl-portable/openbsd/issues/39","labels_url":"https://api.github.com/repos/libressl-portable/openbsd/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/libressl-portable/openbsd/issues/39/comments","events_url":"https://api.github.com/repos/libressl-portable/openbsd/issues/39/events","html_url":"https://github.com/libressl-portable/openbsd/issues/39","id":95951531,"number":39,"title":"TLS default config is never freed","user":{"login":"iurien","id":10760526,"avatar_url":"https://avatars.githubusercontent.com/u/10760526?v=3","gravatar_id":"","url":"https://api.github.com/users/iurien","html_url":"https://github.com/iurien","followers_url":"https://api.github.com/users/iurien/followers","following_url":"https://api.github.com/users/iurien/following{/other_user}","gists_url":"https://api.github.com/users/iurien/gists{/gist_id}","starred_url":"https://api.github.com/users/iurien/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iurien/subscriptions","organizations_url":"https://api.github.com/users/iurien/orgs","repos_url":"https://api.github.com/users/iurien/repos","events_url":"https://api.github.com/users/iurien/events{/privacy}","received_events_url":"https://api.github.com/users/iurien/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-19T21:47:40Z","updated_at":"2015-07-19T21:55:09Z","closed_at":"2015-07-19T21:55:09Z","body":"I think the TLS API default configuration is never freed. Also I don't see how the user can access the default configuration in order to have control upon it.\r\n\r\ntls_free is related to the context. I think if there is tls_init, there should be tls_free which frees the global config allocated and other things global. But tls_free is related to the context, thus, its name should be like tls_ctx_free().. for me is confusing. In general I think API funcitons related to the context to have name like tls_ctx_...\r\n\r\nAlso I think the pointer arguments like ctx and others of the api functions should be checked if they were provided by the user as NULL, thus it will make the use of API functions more secure. \r\n"}}