shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-07 10:40:28 +09:00
Code Issues Packages Projects Releases Wiki Activity

external: Make sure we burn buffers in bcrypt

Browse Source 
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Andreas Schneider
2015-05-04 17:23:13 +02:00
parent cf05e653de
commit 244881b87d
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/external/bcrypt_pbkdf.c vendored
View File

@@ -96,9 +96,9 @@ bcrypt_hash(uint8_t *sha2pass, uint8_t *sha2salt, uint8_t *out)
}
/* zap */
memset(ciphertext, 0, sizeof(ciphertext));
memset(cdata, 0, sizeof(cdata));
memset(&state, 0, sizeof(state));
BURN_BUFFER(ciphertext, sizeof(ciphertext));
BURN_BUFFER(cdata, sizeof(cdata));
BURN_BUFFER(&state, sizeof(state));
}
int
@@ -173,8 +173,7 @@ bcrypt_pbkdf(const char *pass, size_t passlen, const uint8_t *salt, size_t saltl
}
/* zap */
memset(out, 0, sizeof(out));
memset(countsalt, 0, saltlen + 4);
BURN_BUFFER(out, sizeof(out));
free(countsalt);
return 0;