Race condition when freeing RSA keys.
There is no lock protecting the refcnt field of crypto_pk_env_t; this can cause keys to not get freed from within cpuworker.c, or worse.
There are two ways to fix this: add a lock to each key that needs to be held when the key is modified, or add a function to make a real honest-to-god copy of the key if we're going to be messing with the key's reference count in two threads at once.
[Automatically added by flyspray2trac: Operating System: All]