The branch OpenSSL_1_0_2-stable has been updated via dbf71ae457dfa5632518612b58efccd40f528f26 (commit) from 6555a8941bd6be5790d3b45c41de23234a8e527f (commit)
- Log ----------------------------------------------------------------- commit dbf71ae457dfa5632518612b58efccd40f528f26 Author: Bernd Edlinger <bernd.edlin...@hotmail.de> Date: Sun Mar 17 10:02:07 2019 +0100 Clear the secret point in ecdh_compute_key Reviewed-by: Paul Dale <paul.d...@oracle.com> (Merged from https://github.com/openssl/openssl/pull/8502) ----------------------------------------------------------------------- Summary of changes: crypto/ecdh/ech_ossl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crypto/ecdh/ech_ossl.c b/crypto/ecdh/ech_ossl.c index d3b0524..8b69ce5 100644 --- a/crypto/ecdh/ech_ossl.c +++ b/crypto/ecdh/ech_ossl.c @@ -207,7 +207,7 @@ static int ecdh_compute_key(void *out, size_t outlen, const EC_POINT *pub_key, err: if (tmp) - EC_POINT_free(tmp); + EC_POINT_clear_free(tmp); if (ctx) BN_CTX_end(ctx); if (ctx)