Make CRYPTO_cleanup_all_ex_data() a compatibility no-op

The ex_data callback registry is process-wide, but this API could free
it while other threads were still using libcrypto, resulting in a
use-after-free.

Retain the public symbol as a compatibility no-op and mark it
deprecated. Move the actual cleanup to an internal function called by
OPENSSL_cleanup(). Replace the in-tree callers with OPENSSL_cleanup()
at final shutdown to preserve cleanup behavior and coverage.

Document both APIs and the requirement that OPENSSL_cleanup() only be
called after all threads and components have stopped using libcrypto.

ok tb

2 files changed, 54 insertions, 8 deletions

diff --git a/src/lib/libcrypto/man/CRYPTO_set_ex_data.3 b/src/lib/libcrypto/man/CRYPTO_set_ex_data.3
index ae2b04b528..00b5785533 100644
--- a/src/lib/libcrypto/man/CRYPTO_set_ex_data.3
+++ b/src/lib/libcrypto/man/CRYPTO_set_ex_data.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: CRYPTO_set_ex_data.3,v 1.17 2026/08/23 04:46:31 jsg Exp $
+.\" $OpenBSD: CRYPTO_set_ex_data.3,v 1.18 2026/08/30 12:19:37 kenjiro Exp $
 .\"
 .\" Copyright (c) 2023 Ingo Schwarze <schwarze@openbsd.org>
 .\"
@@ -14,7 +14,7 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: August 23 2026 $
+.Dd $Mdocdate: August 30 2026 $
 .Dt CRYPTO_SET_EX_DATA 3
 .Os
 .Sh NAME
@@ -25,7 +25,8 @@
 .Nm CRYPTO_new_ex_data ,
 .Nm CRYPTO_set_ex_data ,
 .Nm CRYPTO_get_ex_data ,
-.Nm CRYPTO_free_ex_data
+.Nm CRYPTO_free_ex_data ,
+.Nm CRYPTO_cleanup_all_ex_data
 .Nd low-level functions for application specific data
 .Sh SYNOPSIS
 .Lb libcrypto
@@ -89,6 +90,8 @@
 .Fa "void *parent"
 .Fa "CRYPTO_EX_DATA *ad"
 .Fc
+.Ft void
+.Fn CRYPTO_cleanup_all_ex_data void
 .Sh DESCRIPTION
 The library implements the functions documented in the
 .Xr RSA_get_ex_new_index 3
@@ -342,6 +345,20 @@ Despite its name,
 does not free
 .Fa ad
 itself.
+.Pp
+.Fn CRYPTO_cleanup_all_ex_data
+is deprecated and has no effect.
+It is retained for source and binary compatibility only.
+Application programs should not call it after individual operations,
+from individual library components, or during process shutdown.
+No replacement call is needed.
+.Pp
+In particular,
+.Xr OPENSSL_cleanup 3
+is not a replacement for
+.Fn CRYPTO_cleanup_all_ex_data .
+It tears down process-wide library state and is only intended for final
+shutdown after all threads using libcrypto have stopped.
 .Sh RETURN VALUES
 .Fn CRYPTO_get_ex_new_index
 returns a new index equal to or greater than 1
@@ -425,6 +442,10 @@ and
 .Fn CRYPTO_EX_dup
 first appeared in OpenSSL 0.9.5 and have been available since
 .Ox 2.7 .
+.Pp
+.Fn CRYPTO_cleanup_all_ex_data
+first appeared in OpenSSL 0.9.7 and has been available since
+.Ox 3.2 .
 .Sh CAVEATS
 If a program installs callback functions, the last call to
 .Fn CRYPTO_get_ex_new_index
diff --git a/src/lib/libcrypto/man/OPENSSL_init_crypto.3 b/src/lib/libcrypto/man/OPENSSL_init_crypto.3
index 5c29d55aa9..24756bc396 100644
--- a/src/lib/libcrypto/man/OPENSSL_init_crypto.3
+++ b/src/lib/libcrypto/man/OPENSSL_init_crypto.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: OPENSSL_init_crypto.3,v 1.7 2025/06/09 12:43:53 schwarze Exp $
+.\" $OpenBSD: OPENSSL_init_crypto.3,v 1.8 2026/08/30 12:19:37 kenjiro Exp $
 .\" Copyright (c) 2018, 2020 Ingo Schwarze <schwarze@openbsd.org>
 .\"
 .\" Permission to use, copy, modify, and distribute this software for any
@@ -13,13 +13,14 @@
 .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 .\"
-.Dd $Mdocdate: June 9 2025 $
+.Dd $Mdocdate: August 30 2026 $
 .Dt OPENSSL_INIT_CRYPTO 3
 .Os
 .Sh NAME
 .Nm OPENSSL_init_crypto ,
-.Nm OPENSSL_init
-.Nd initialise the crypto library
+.Nm OPENSSL_init ,
+.Nm OPENSSL_cleanup
+.Nd initialise and shut down the crypto library
 .Sh SYNOPSIS
 .Lb libcrypto
 .In openssl/crypto.h
@@ -30,8 +31,13 @@
 .Fc
 .Ft void
 .Fn OPENSSL_init void
+.Ft void
+.Fn OPENSSL_cleanup void
 .Sh DESCRIPTION
-These functions are deprecated.
+.Fn OPENSSL_init_crypto
+and
+.Fn OPENSSL_init
+are deprecated.
 It is never useful for an application program
 to call either of them explicitly.
 .Pp
@@ -84,6 +90,21 @@ the first one have any effect.
 .Pp
 .Fn OPENSSL_init
 has no effect at all.
+.Pp
+.Fn OPENSSL_cleanup
+frees process-wide resources allocated by libcrypto.
+It is intended exclusively for the final shutdown of libcrypto in a process.
+Before calling it, the application has to ensure that all other threads
+that may use libcrypto have stopped and that no library component will use
+libcrypto again.
+After it returns, libcrypto cannot be reinitialized and no libcrypto or
+libssl function may be called.
+.Pp
+.Fn OPENSSL_cleanup
+is not a replacement for deprecated cleanup functions such as
+.Xr CRYPTO_cleanup_all_ex_data 3
+and must not be called after individual cryptographic operations or when an
+individual library component is finished with libcrypto.
 .Sh RETURN VALUES
 .Fn OPENSSL_init_crypto
 is intended to return 1 on success or 0 on error.
@@ -101,6 +122,10 @@ It stopped having any effect in OpenSSL 1.1.1 and in
 .Fn OPENSSL_init_crypto
 first appeared in OpenSSL 1.1.0 and has been available since
 .Ox 6.3 .
+.Pp
+.Fn OPENSSL_cleanup
+first appeared in OpenSSL 1.1.0 and has been available since
+.Ox 7.2 .
 .Sh BUGS
 .Fn OPENSSL_init_crypto
 silently ignores almost all kinds of errors.