contrib/ci/sssd.supp


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171

#
# Valgrind suppression patterns
#
# See an introduction to suppressions in Valgrind manual:
# http://valgrind.org/docs/manual/manual-core.html#manual-core.suppress
#
# Each suppression name here must start with "sssd-" to differentiate it from
# suppressions maintained elsewhere.
#

# talloc-involved leaks
{
   sssd-leak-talloc
   Memcheck:Leak
   ...
   fun:talloc_*
   ...
}
{
   sssd-leak-_talloc
   Memcheck:Leak
   ...
   fun:_talloc_*
   ...
}

# nss3-involved leaks
{
   sssd-leak-nss3
   Memcheck:Leak
   ...
   obj:*/libnss3.so
   ...
}

# nspr4-involved leaks
{
   sssd-leak-nspr4
   Memcheck:Leak
   ...
   obj:*/libnspr4.so
   ...
}
{
   sssd-leak-nspr4-arena-allocate
   Memcheck:Leak
   fun:malloc
   fun:PL_ArenaAllocate
   ...
}

# dbus-involved leaks
{
   sssd-leak-dbus
   Memcheck:Leak
   ...
   obj:*/libdbus-1.so.*
   ...
}

# False positive - pcre_free is called in sss_names_ctx_destructor
{
   sssd-leak-sss_names
   Memcheck:Leak
   fun:malloc
   fun:pcre_compile2
   fun:sss_names_init_from_args
   ...
}

# Ignore tests exiting and abandoning cmocka state, concerns dyndns test
{
   sssd-leak-cmocka-exit
   Memcheck:Leak
   fun:malloc
   fun:_test_malloc
   fun:_run_tests
   fun:main
}

# Stpncpy false positive on RHEL6:
# https://lists.fedorahosted.org/pipermail/sssd-devel/2014-September/021417.html
# possibly related to:
# https://www.mail-archive.com/valgrind-users@lists.sourceforge.net/msg03832.html
{
   sssd-value8-stpncpy
   Memcheck:Value8
   obj:/lib*/libc-2.12.so
   fun:sha512_crypt_r
   ...
}
{
   sssd-cond-stpncpy
   Memcheck:Cond
   obj:/lib*/libc-2.12.so
   fun:sha512_crypt_r
   ...
}

# False positive leak involving RHEL6 glib memory slices
{
   sssd-leak-glib-slices
   Memcheck:Leak
   fun:memalign
   fun:posix_memalign
   obj:/lib*/libglib-2.0.so*
   fun:g_slice_alloc
   fun:g_string_sized_new
   fun:g_utf8_casefold
   ...
}

# uninitialised value in libselinux (fixed in fedora >= 21)
{
   libselinux-jump-or-move-depends-on-uninitialised-value-in-selabel_close
   Memcheck:Cond
   obj:/usr/lib64/libselinux.so.1
   fun:selabel_close
   obj:/usr/lib64/libkrb5support.so.0.1
   fun:_dl_fini
   fun:__run_exit_handlers
   fun:exit
   fun:(below main)
}

# long-standing memory leak in popt
{
   popt-memleak-from-poptGetNextOpt-malloc
   Memcheck:Leak
   fun:malloc
   ...
   fun:poptGetNextOpt
   fun:main
}

# long-standing memory leak in popt
{
   popt-memleak-from-poptGetNextOpt-realloc
   Memcheck:Leak
   fun:realloc
   ...
   fun:poptGetNextOpt
   fun:main
}

# popt was not good with read access either. Applies for popt <= 1.13
{
    popt-suppress-invalid-read
    Memcheck:Addr4
    ...
    fun:poptGetNextOpt
    fun:main
}

# Some tests initialize c-ares context, then fork a child that just exits
# without a proper teardown, which means the ares destructor is not called.
# Suppress those errors.
{
   c-ares-suppress-leak-from-init
   Memcheck:Leak
   ...
   fun:ares_init_options
   fun:recreate_ares_channel
   fun:resolv_init
   fun:be_res_init
   fun:be_init_failover
   fun:test_ipa_server_create_trusts_setup
   ...
   fun:_cmocka_run_group_tests
   fun:main
}