执行gpg -K命令查询密钥存在导致gpg-agent进程内存泄漏风险

内存泄漏复现步骤如下：

1.创建测试密钥

```
gpg --full-gen-key --batch <(echo "Key-Type: 1"; \
                             echo "Key-Length: 4096"; \
                             echo "Subkey-Type: 1"; \
                             echo "Subkey-Length: 4096"; \
                             echo "Expire-Date: 0"; \
                             echo "Name-Real: test test"; \
                             echo "Name-Email: test@test.com"; \
                             echo "%no-protection"; )
```

2.调整密钥格式

```
cd $HOME
for f in `ls .gnupg/private-keys-v1.d/*.key`; do sed -i '1d' $f; done
for f in `ls .gnupg/private-keys-v1.d/*.key`; do sed -i 's/Key: (/(/' $f; done
```

3.循环执行gpg -K
`while true; do gpg -K; done`

4.抓取gpg-agent进程RSS数据
```
while true; do sleep 1; pmap -x `pidof gpg-agent` | grep "total kB" | awk '{print $4;}'; done
```

结果如下，gpg-agent进程RSS数据持续增长，结束gpg -K命令，RSS停止增长，再次执行gpg -K，则再次持续增长
```
# while true; do sleep 1; pmap -x `pidof gpg-agent` | grep "total kB" | awk '{print $4;}'; done
9624
10804
12024
13220
14388
15600
16764
31416
33624
20200
21388
22540
23672
24832
26196
26196
26196
26196
26196
26196
26196
26196
26196
26196
26196
26196
26764
27952
29160
30372
31552
32732
33888
35120
36308
37228
37228
37228
```

src-openEuler/gnupg2

内容风险标识

评论 (2)

src-openEuler/gnupg2 .gitee-modal { width: 500px !important; }

内容风险标识