shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-10 10:26:47 +09:00
Code Issues Packages Projects Releases Wiki Activity

external: Make sure we burn buffers in bcrypt

Browse Source 
Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Andreas Schneider
2015-05-04 17:23:13 +02:00
parent cf05e653de
commit 244881b87d
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
src/external/bcrypt_pbkdf.c vendored
View File

@@ -96,9 +96,9 @@ bcrypt_hash(uint8_t *sha2pass, uint8_t *sha2salt, uint8_t *out)
} }
/* zap */ /* zap */
memset(ciphertext, 0, sizeof(ciphertext)); BURN_BUFFER(ciphertext, sizeof(ciphertext));
memset(cdata, 0, sizeof(cdata)); BURN_BUFFER(cdata, sizeof(cdata));
memset(&state, 0, sizeof(state)); BURN_BUFFER(&state, sizeof(state));
} }
int int
@@ -173,8 +173,7 @@ bcrypt_pbkdf(const char *pass, size_t passlen, const uint8_t *salt, size_t saltl
} }
/* zap */ /* zap */
memset(out, 0, sizeof(out)); BURN_BUFFER(out, sizeof(out));
memset(countsalt, 0, saltlen + 4);
free(countsalt); free(countsalt);
return 0; return 0;