CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2024/11/15 01:49:07
Modified files:
lib/libcrypto/ec: ec_key.c
Log message:
EC_KEY_copy() don't leave stale private keys in place
As most other objects, EC_KEYs can be as sparsely and invalidly populated
as imagination permits and the competent designers of EC_KEY_copy() chose
to just copy over what's available (yeah, what kind of copy is that?) and
leave in place what happens to be there. In particular, if the dest EC key
was used with a different group and has a private key, but the source key
doesn't, the dest private key remains intact, as invalid, incompatible and
unusable as it may be. Fix this by clearing said private key.
ok jsing
