coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-11-10 07:10:12 +08:00
Code Issues Packages Projects Releases Wiki Activity

Wipe stack buffers in block_cipher_df

Browse Source 
This is a partial backport of
1b3649906261dfaafcc5b8750279a0012c1c604a (only for the buffer wiping).
Other wiping calls were previously added as backports of
"CTR_DRBG: clean stack
buffers" (d9aa84dc0d42dcb5e23ba2bb47ce39592193b8f1). This completes
the backporting of stack buffer wiping from the development branch.
This commit is contained in:
Gilles Peskine 2018-11-27 16:37:23 +01:00
parent 73e34facb4
commit 43c19648db
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/ctr_drbg.c
View File

@ -226,6 +226,10 @@ static int block_cipher_df( unsigned char *output,
mbedtls_aes_free( &aes_ctx ); mbedtls_aes_free( &aes_ctx );
mbedtls_zeroize( buf, sizeof( buf ) );
mbedtls_zeroize( tmp, sizeof( tmp ) );
mbedtls_zeroize( key, sizeof( key ) );
mbedtls_zeroize( chain, sizeof( chain ) );
return( 0 ); return( 0 );
} }