yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-26 21:11:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Backport 1.3:Set PEM buffer to zero before freeing it

Browse source 
Set PEM buffer to zero before freeing it, to avoid private keys
being leaked to memory after releasing it.
This commit is contained in:
Ron Eldor 2017-09-05 15:34:35 +03:00
parent a75a459143
commit 27ce0b5ff1
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ChangeLog
View file

@ -1,5 +1,11 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS x.x.x branch released xxxx-xx-xx
Security
* Set PEM buffer to zero before freeing it, to avoid decoded private keys
being leaked to memory after release.
= mbed TLS 1.3.21 branch released 2017-08-10
Security

2
library/pem.c
View file

@ -389,6 +389,8 @@ int pem_read_buffer( pem_context *ctx, const char *header, const char *footer,
void pem_free( pem_context *ctx )
{
if ( ctx->buf != NULL )
polarssl_zeroize( ctx->buf, ctx->buflen );
polarssl_free( ctx->buf );
polarssl_free( ctx->info );