upstream: explicit_bzero here to be consistent with other kex*.c;
report from coolbugcheckers AT gmail.com OpenBSD-Commit-ID: a90f146c5b5f5b1408700395e394f70b440856cb
This commit is contained in:
parent
5eff5b858e
commit
2d1428b11c
|
@ -1,4 +1,4 @@
|
||||||
/* $OpenBSD: kexgexs.c,v 1.33 2018/04/10 00:10:49 djm Exp $ */
|
/* $OpenBSD: kexgexs.c,v 1.35 2018/10/04 00:04:41 djm Exp $ */
|
||||||
/*
|
/*
|
||||||
* Copyright (c) 2000 Niels Provos. All rights reserved.
|
* Copyright (c) 2000 Niels Provos. All rights reserved.
|
||||||
* Copyright (c) 2001 Markus Friedl. All rights reserved.
|
* Copyright (c) 2001 Markus Friedl. All rights reserved.
|
||||||
|
@ -240,6 +240,7 @@ input_kex_dh_gex_init(int type, u_int32_t seq, struct ssh *ssh)
|
||||||
if ((r = kex_derive_keys_bn(ssh, hash, hashlen, shared_secret)) == 0)
|
if ((r = kex_derive_keys_bn(ssh, hash, hashlen, shared_secret)) == 0)
|
||||||
r = kex_send_newkeys(ssh);
|
r = kex_send_newkeys(ssh);
|
||||||
out:
|
out:
|
||||||
|
explicit_bzero(hash, sizeof(hash));
|
||||||
DH_free(kex->dh);
|
DH_free(kex->dh);
|
||||||
kex->dh = NULL;
|
kex->dh = NULL;
|
||||||
BN_clear_free(dh_client_pub);
|
BN_clear_free(dh_client_pub);
|
||||||
|
|
Loading…
Reference in New Issue