Author: jhb
Date: Thu Jun 25 20:22:44 2020
New Revision: 362628
URL: https://svnweb.freebsd.org/changeset/base/362628

Log:
  Explicitly zero the temporary auth context used to generate HMAC state.
  
  Reviewed by:  delphij
  Sponsored by: Chelsio Communications
  Differential Revision:        https://reviews.freebsd.org/D25439

Modified:
  head/sys/dev/cesa/cesa.c

Modified: head/sys/dev/cesa/cesa.c
==============================================================================
--- head/sys/dev/cesa/cesa.c    Thu Jun 25 20:21:34 2020        (r362627)
+++ head/sys/dev/cesa/cesa.c    Thu Jun 25 20:22:44 2020        (r362628)
@@ -459,6 +459,7 @@ cesa_set_mkey(struct cesa_session *cs, int alg, const 
                hin[i] = htobe32(hin[i]);
                hout[i] = htobe32(hout[i]);
        }
+       explicit_bzero(&auth_ctx, sizeof(auth_ctx));
 }
 
 static int
_______________________________________________
svn-src-all@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"

Reply via email to