shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-04 12:20:42 +09:00
Code Issues Packages Projects Releases Wiki Activity

pki: Make sure the buffer is zeroized too

Browse Source 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Eshan Kelkar <eshankelkar@galorithm.com>
This commit is contained in:
Jakub Jelen
2025-05-14 22:38:46 +02:00
parent 6d2a3e4eb6
commit e2064b743d
3 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/pki_crypto.c
View File

@@ -1547,6 +1547,8 @@ ssh_string pki_key_to_blob(const ssh_key key, enum ssh_key_e type)
if (buffer == NULL) {
return NULL;
}
/* The buffer will contain sensitive information. Make sure it is erased */
ssh_buffer_set_secure(buffer);
if (key->cert != NULL) {
rc = ssh_buffer_add_buffer(buffer, key->cert);

2
src/pki_gcrypt.c
View File

@@ -1409,6 +1409,8 @@ ssh_string pki_key_to_blob(const ssh_key key, enum ssh_key_e type)
if (buffer == NULL) {
return NULL;
}
/* The buffer will contain sensitive information. Make sure it is erased */
ssh_buffer_set_secure(buffer);
if (key->cert != NULL) {
rc = ssh_buffer_add_buffer(buffer, key->cert);

2
src/pki_mbedcrypto.c
View File

@@ -890,6 +890,8 @@ ssh_string pki_key_to_blob(const ssh_key key, enum ssh_key_e type)
if (buffer == NULL) {
return NULL;
}
/* The buffer will contain sensitive information. Make sure it is erased */
ssh_buffer_set_secure(buffer);
if (key->cert != NULL) {
rc = ssh_buffer_add_buffer(buffer, key->cert);