]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC r261618:
authordelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sat, 22 Feb 2014 00:30:33 +0000 (00:30 +0000)
committerdelphij <delphij@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Sat, 22 Feb 2014 00:30:33 +0000 (00:30 +0000)
commit2740f4a23d72887b3860f630d7eabd2b97739fc8
tree1eecd0857baa4a8ac51d1f2338d726345f7cd222
parent90dce5c2c0d75a89b6394aa89b840fa2bde42849
MFC r261618:

In g_eli_crypto_hmac_init(), zero out after using the ipad buffer,
k_ipad.

Note that the two consumers in geli(4) are not affected by this
issue because the way the code is constructed and as such, we
believe there is no security impact with or without this change
with geli(4)'s usage.

Reported by: Serge van den Boom <serge vdboom.org>
Reviewed by: pjd

git-svn-id: svn://svn.freebsd.org/base/stable/10@262318 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
sys/geom/eli/g_eli_crypto.c