The branch OpenSSL_1_1_0-stable has been updated via 3bdc1dc8fcc97a8945ddbc2748e7059207ea3914 (commit) from b763981b76b6a97c72011c290ec574b37a15f6e4 (commit)
- Log ----------------------------------------------------------------- commit 3bdc1dc8fcc97a8945ddbc2748e7059207ea3914 Author: Kazuki Yamaguchi <k...@rhe.jp> Date: Thu Jan 26 13:01:30 2017 +0900 Properly zero cipher_data for ChaCha20-Poly1305 on cleanup Fix a typo. Probably this has not been found because EVP_CIPHER_CTX is smaller than EVP_CHACHA_AEAD_CTX and heap overflow does not occur. Reviewed-by: Richard Levitte <levi...@openssl.org> Reviewed-by: Rich Salz <rs...@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2294) (cherry picked from commit a8f957686675194d786b41f6e1f7c48bb85723ec) ----------------------------------------------------------------------- Summary of changes: crypto/evp/e_chacha20_poly1305.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/evp/e_chacha20_poly1305.c b/crypto/evp/e_chacha20_poly1305.c index 46bc2cb..7fd4f8d 100644 --- a/crypto/evp/e_chacha20_poly1305.c +++ b/crypto/evp/e_chacha20_poly1305.c @@ -316,7 +316,7 @@ static int chacha20_poly1305_cleanup(EVP_CIPHER_CTX *ctx) { EVP_CHACHA_AEAD_CTX *actx = aead_data(ctx); if (actx) - OPENSSL_cleanse(ctx->cipher_data, sizeof(*ctx) + Poly1305_ctx_size()); + OPENSSL_cleanse(ctx->cipher_data, sizeof(*actx) + Poly1305_ctx_size()); return 1; } _____ openssl-commits mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-commits