GSS unwrap: wipe copy of DES key when done with it

Zero out the DES_cblock structure instead of the (not yet used at this point
in the function) key schedule.  The contents could potentially be left
on the stack in the case of an error return from _gssapi_verify_pad().
This commit is contained in:
Benjamin Kaduk
2018-10-02 17:49:04 -05:00
committed by Jeffrey Altman
parent 0f7fc0fba6
commit e21866f7a2

View File

@@ -109,7 +109,7 @@ unwrap_des
EVP_Cipher(&des_ctx, p, p, input_message_buffer->length - len);
EVP_CIPHER_CTX_cleanup(&des_ctx);
memset (&schedule, 0, sizeof(schedule));
memset (&deskey, 0, sizeof(deskey));
}
if (IS_DCE_STYLE(context_handle)) {