Explicitly zero the temporary auth context used to generate HMAC state.

Reviewed by: delphij Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D25439
svn path=/head/; revision=362628
2020-06-25 20:22:44 +00:00 · 2020-06-25 20:22:44 +00:00 · 9b6dc28176 · 2020-12-20 02:59:44 +00:00
commit 9b6dc28176
parent 347c369294
1 changed files with 1 additions and 0 deletions
--- a/sys/dev/cesa/cesa.c
+++ b/sys/dev/cesa/cesa.c
@ -459,6 +459,7 @@ cesa_set_mkey(struct cesa_session *cs, int alg, const uint8_t *mkey, int mklen)
 		hin[i] = htobe32(hin[i]);
 		hout[i] = htobe32(hout[i]);
 	}
+	explicit_bzero(&auth_ctx, sizeof(auth_ctx));
 }

 static int