diff options
| author | Richard Levitte <levitte@openssl.org> | 2002-11-28 08:04:36 +0000 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2002-11-28 08:04:36 +0000 |
| commit | 4579924b7e55fccc7013e6de196f2e2ab175ce39 (patch) | |
| tree | fa19611a704cc901d3ba338cefbbb98878de7ee5 /ssl/kssl.c | |
| parent | 2047bda6fb8bedab1103b7bd5df5ea55eb7ccc9b (diff) | |
Cleanse memory using the new OPENSSL_cleanse() function.
I've covered all the memset()s I felt safe modifying, but may have missed some.
Diffstat (limited to 'ssl/kssl.c')
| -rw-r--r-- | ssl/kssl.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/ssl/kssl.c b/ssl/kssl.c index c294166b9d..1a49f43a83 100644 --- a/ssl/kssl.c +++ b/ssl/kssl.c @@ -1550,7 +1550,7 @@ kssl_ctx_free(KSSL_CTX *kssl_ctx) { if (kssl_ctx == NULL) return kssl_ctx; - if (kssl_ctx->key) memset(kssl_ctx->key, 0, + if (kssl_ctx->key) OPENSSL_cleanse(kssl_ctx->key, kssl_ctx->length); if (kssl_ctx->key) free(kssl_ctx->key); if (kssl_ctx->client_princ) free(kssl_ctx->client_princ); @@ -1654,7 +1654,7 @@ kssl_ctx_setkey(KSSL_CTX *kssl_ctx, krb5_keyblock *session) if (kssl_ctx->key) { - memset(kssl_ctx->key, 0, kssl_ctx->length); + OPENSSL_cleanse(kssl_ctx->key, kssl_ctx->length); free(kssl_ctx->key); } |