yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-03-26 07:45:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Always require reset after psa_get_key_attributes

Browse source 
There was a guarantee that psa_get_key_attributes() does not require a
subsequent psa_reset_key_attributes() to free resources as long as the
key was created with attributes having this property. This requirement
was hard to pin down because if a key is created with default
parameters, there are cases where it is difficult to ensure that the
domain parameters will be reported without allocating memory. So
remove this guarantee. Now the only case psa_reset_key_attributes() is
not required is if the attribute structure has only been modified with
certain specific setters.
This commit is contained in:
Gilles Peskine 2019-04-28 11:32:30 +02:00
parent e56e878207
commit 06af0cd4a3
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
include/psa/crypto.h
View file

@ -151,13 +151,12 @@ psa_status_t psa_crypto_init(void);
* - psa_set_key_usage_flags()
* - psa_set_key_algorithm()
* - psa_reset_key_attributes()
* - psa_get_key_attributes() on a key which has been created with
* attribute structure that itself did not contain auxiliary resources
*
* If the attribute structure has been modified with other functions,
* you must free auxiliary resources by calling psa_reset_key_attributes().
* The following functions may create auxiliary resouces:
* - psa_set_key_domain_parameters()
* - psa_get_key_attributes()
*/
typedef struct psa_key_attributes_s psa_key_attributes_t;