lkml.org 
[lkml]   [2008]   [Nov]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
Patch in this message
/
Date
From
Subject[PATCH] ansi_cprng: zero out key data on exit
Its been mentioned to me a few times that the ansi_cprng doesn't zero out its
data when a context is freed. Given that we store key, and other seed data in
that structure, I think its probably a good idea that we zero it out. This
patch does that.

Regards
Neil

Signed-off-by: Neil Horman <nhorman@tuxdriver.com>


ansi_cprng.c | 1 +
1 file changed, 1 insertion(+)


diff --git a/crypto/ansi_cprng.c b/crypto/ansi_cprng.c
index 72db0fd..e6ad373 100644
--- a/crypto/ansi_cprng.c
+++ b/crypto/ansi_cprng.c
@@ -266,6 +266,7 @@ done:
static void free_prng_context(struct prng_context *ctx)
{
crypto_free_cipher(ctx->tfm);
+ memset(ctx, 0, sizeof(struct prng_context));
}

static int reset_prng_context(struct prng_context *ctx,
--
/****************************************************
* Neil Horman <nhorman@tuxdriver.com>
* Software Engineer, Red Hat
****************************************************/

\
 
 \ /
  Last update: 2008-11-14 22:01    [W:0.041 / U:0.360 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site