diff options
| author | Rich Salz <rsalz@openssl.org> | 2016-11-08 15:56:04 -0500 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2016-11-08 17:20:13 -0500 |
| commit | e5e71f2857275189577ab7b227608ab4ec985471 (patch) | |
| tree | d201da7627b2cea2fa5e60562f0e3d33991f65ef /crypto/bn | |
| parent | 513d76f495a256daf5c70f3c96f8fddc84c84c6a (diff) | |
| download | openssl-e5e71f2857275189577ab7b227608ab4ec985471.tar.gz | |
Zero stack variable with DSA nonce
Thanks to Falko Strenzke for bringing this to our attention.
Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1882)
Diffstat (limited to 'crypto/bn')
| -rw-r--r-- | crypto/bn/bn_rand.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/crypto/bn/bn_rand.c b/crypto/bn/bn_rand.c index c577fd169d..9ce4c5f606 100644 --- a/crypto/bn/bn_rand.c +++ b/crypto/bn/bn_rand.c @@ -253,5 +253,6 @@ int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range, err: OPENSSL_free(k_bytes); + OPENSSL_cleanse(private_bytes, sizeof(private_bytes)); return ret; } |