# OpenSSL process-global state allocated during curl_global_init (TLS backend
# init: namemaps, providers, cipher tables). Retained until process exit; not
# a real leak. "Still reachable" only - real leaks (definite/indirect/possible)
# are still reported and fail the gate via --error-exitcode.
{
   openssl_crypto_malloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:malloc
   ...
   obj:*crypto*
   ...
}

{
   openssl_crypto_realloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:realloc
   ...
   obj:*crypto*
   ...
}

{
   openssl_crypto_posix_memalign
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:posix_memalign
   ...
   obj:*crypto*
   ...
}

{
   openssl_crypto_calloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:calloc
   ...
   obj:*crypto*
   ...
}

{
   openssl_crypto_aligned_alloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:aligned_alloc
   ...
   obj:*crypto*
   ...
}

{
   openssl_ssl_malloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:malloc
   ...
   obj:*ssl*
   ...
}

{
   openssl_ssl_realloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:realloc
   ...
   obj:*ssl*
   ...
}

{
   openssl_ssl_posix_memalign
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:posix_memalign
   ...
   obj:*ssl*
   ...
}

{
   openssl_ssl_calloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:calloc
   ...
   obj:*ssl*
   ...
}

{
   openssl_ssl_aligned_alloc
   Memcheck:Leak
   match-leak-kinds: reachable
   fun:aligned_alloc
   ...
   obj:*ssl*
   ...
}

# Thread-local storage (Dtv) allocated by glibc for each pthread_create.
# Retained until process exit; not a real leak. "Possibly lost" only.
{
   pthread_tls
   Memcheck:Leak
   match-leak-kinds: possible
   fun:calloc
   ...
   fun:allocate_stack
   ...
}