Kernel
/
iwd
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git
3
0
Fork 0
Code Releases Activity

eap-wsc: Convert memsets to explicit_bzero

This commit is contained in:
Andrew Zaborowski 2020-04-03 18:45:12 +02:00 committed by Denis Kenzior
parent 0ffb96056a
commit 508d71e3c1
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/eap-wsc.c
View File

@ -843,11 +843,11 @@ static void eap_wsc_handle_m2(struct eap_state *eap,
l_checksum_get_digest(sha256, dhkey, sizeof(dhkey)); l_checksum_get_digest(sha256, dhkey, sizeof(dhkey));
l_checksum_free(sha256); l_checksum_free(sha256);
memset(shared_secret, 0, shared_secret_len); explicit_bzero(shared_secret, shared_secret_len);
hmac_sha256 = l_checksum_new_hmac(L_CHECKSUM_SHA256, hmac_sha256 = l_checksum_new_hmac(L_CHECKSUM_SHA256,
dhkey, sizeof(dhkey)); dhkey, sizeof(dhkey));
memset(dhkey, 0, sizeof(dhkey)); explicit_bzero(dhkey, sizeof(dhkey));
if (!hmac_sha256) if (!hmac_sha256)
return; return;
@ -864,7 +864,7 @@ static void eap_wsc_handle_m2(struct eap_state *eap,
l_checksum_free(hmac_sha256); l_checksum_free(hmac_sha256);
r = wsc_kdf(kdk, &keys, sizeof(keys)); r = wsc_kdf(kdk, &keys, sizeof(keys));
memset(kdk, 0, sizeof(kdk)); explicit_bzero(kdk, sizeof(kdk));
if (!r) if (!r)
return; return;
@ -888,7 +888,7 @@ static void eap_wsc_handle_m2(struct eap_state *eap,
sizeof(keys.keywrap_key)); sizeof(keys.keywrap_key));
clear_keys: clear_keys:
memset(&keys, 0, sizeof(keys)); explicit_bzero(&keys, sizeof(keys));
} }
static void eap_wsc_handle_nack(struct eap_state *eap, static void eap_wsc_handle_nack(struct eap_state *eap,
@ -1228,12 +1228,12 @@ static bool eap_wsc_load_settings(struct eap_state *eap,
if (!l_key_validate_dh_payload(private_key, 192, if (!l_key_validate_dh_payload(private_key, 192,
crypto_dh5_prime, crypto_dh5_prime,
crypto_dh5_prime_size)) { crypto_dh5_prime_size)) {
memset(private_key, 0, 192); explicit_bzero(private_key, 192);
goto err; goto err;
} }
wsc->private = l_key_new(L_KEY_RAW, private_key, 192); wsc->private = l_key_new(L_KEY_RAW, private_key, 192);
memset(private_key, 0, 192); explicit_bzero(private_key, 192);
} else } else
wsc->private = l_key_generate_dh_private(crypto_dh5_prime, wsc->private = l_key_generate_dh_private(crypto_dh5_prime,
crypto_dh5_prime_size); crypto_dh5_prime_size);