Ticket #1265: 04-limit-ssl-mem.patch

src/connections.c

@@ -194 +194 @@
 #ifdef USE_OPENSSL
         int r, ssl_err, len;
         buffer *b = NULL;
+        size_t cnt=0;
+        static const size_t max_buffered_blocks=8;
 
         if (!con->conf.is_ssl) return -1;
 
@@ -223 +225 @@
                         con->bytes_read += len;
                         b = NULL;
                 }
-        } while (len > 0);
+        } while ((len > 0) && (++cnt<max_buffered_blocks));
 
 
         if (len < 0) {

src/network.c

@@ -380 +380 @@
                                         s->ssl_pemfile);
                         return -1;
                 }
-                SSL_CTX_set_default_read_ahead(s->ssl_ctx, 1);
+                SSL_CTX_set_default_read_ahead(s->ssl_ctx, 0);
                 SSL_CTX_set_mode(s->ssl_ctx, SSL_CTX_get_mode(s->ssl_ctx) | SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER);
 
                 srv_socket->ssl_ctx = s->ssl_ctx;