tree a5dc360d4d148450091cb167b32197682661e704
parent 23824fa0fed94f4660ffafb15aaea8b317f2c8a6
author David Benjamin <davidben@google.com> 1708104472 -0500
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1708106706 +0000

Add a no-op OPENSSL_INIT_NO_ATEXIT

Upstream OpenSSL will, by default, register an atexit callback to free
globals, even though the process is going to be destroyed anyway.

Not only is this pointless, but it introduces UAFs on race condition if
some thread outlives the main thread. Some projects have started to
notice this, and use OPENSSL_INIT_NO_ATEXIT from 1.1.1b. Add the
constant for compatibility.

We already do not call atexit, so the option is a no-op.

Change-Id: Ia17c529c27646507100ebb69c884e2db9cb70431
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/66347
Commit-Queue: David Benjamin <davidben@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Auto-Submit: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>