qa/lsan.supp: suppress still-reachable third-party leaks

Several unittests fail LeakSanitizer on still-reachable allocations that
belong to third-party libraries, not to Ceph. These are boost.thread's
main-thread TLS, OpenSSL's one-time init (the ForkDeathTest children
_exit() before it is freed), and the cipher, DRBG and error-stack state
that OpenSSL and libcryptsetup keep behind the librbd encryption and
migration unittests. None get freed without OPENSSL_cleanup(), so suppress
them by their allocation entry points.

Signed-off-by: Sun Yuechi <sunyuechi@iscas.ac.cn>

diff --git a/qa/lsan.supp b/qa/lsan.supp
index 329389e5b5f3c239525eeaa9a6e60f8d506be6f3..8dd1faa5e81066798add2df4fef6197b42c32de6 100644 (file)
--- a/qa/lsan.supp
+++ b/qa/lsan.supp
@@ -48,3 +48,22 @@ leak:^ceph::ErasureCodePluginRegistry::load
 # SQLite internal allocations
 # These are indirect leaks from SQLite's internal memory management
 leak:libsqlite3.so
+
+# boost.thread main-thread TLS; freed only when a boost-created thread exits, so
+# still reachable at exit. Benign.
+leak:boost::detail::make_external_thread_data
+
+# OpenSSL one-time init; ForkDeathTest children _exit() without OPENSSL_cleanup.
+leak:^OPENSSL_init_crypto
+
+# Still-reachable OpenSSL / libcryptsetup state with no API to free at exit;
+# seen in the librbd encryption and migration unittests under ASan.
+#
+# libcryptsetup OpenSSL cipher/per-thread state that survives crypt_free().
+leak:libcryptsetup
+# OpenSSL DRBG global state, freed only by OPENSSL_cleanup (never called here).
+leak:^RAND_bytes_ex
+leak:^RAND_priv_bytes_ex
+# OpenSSL per-thread error stack/strings, freed only by OPENSSL_thread_stop.
+leak:^ossl_err_get_state_int
+leak:^ERR_add_error_vdata