mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2025-02-02 05:21:08 +00:00
Zeroising of plaintext buffers to erase unused application data from memory
Signed-off-by: gabor-mezei-arm <gabor.mezei@arm.com>
This commit is contained in:
parent
3a1944a187
commit
3eaa10389d
4
ChangeLog.d/zeroising_of_plaintext_buffer.txt
Normal file
4
ChangeLog.d/zeroising_of_plaintext_buffer.txt
Normal file
|
@ -0,0 +1,4 @@
|
||||||
|
Security
|
||||||
|
* Zeroising of plaintext buffers in mbedtls_ssl_read() to erase unused
|
||||||
|
application data from memory. Reported in #689 by
|
||||||
|
Johan Uppman Bruce of Sectra.
|
|
@ -8569,6 +8569,10 @@ int mbedtls_ssl_read( mbedtls_ssl_context *ssl, unsigned char *buf, size_t len )
|
||||||
memcpy( buf, ssl->in_offt, n );
|
memcpy( buf, ssl->in_offt, n );
|
||||||
ssl->in_msglen -= n;
|
ssl->in_msglen -= n;
|
||||||
|
|
||||||
|
/* Zeroising the plaintext buffer to erase unused application data
|
||||||
|
from the memory. */
|
||||||
|
mbedtls_platform_zeroize( ssl->in_offt, n );
|
||||||
|
|
||||||
if( ssl->in_msglen == 0 )
|
if( ssl->in_msglen == 0 )
|
||||||
{
|
{
|
||||||
/* all bytes consumed */
|
/* all bytes consumed */
|
||||||
|
|
Loading…
Reference in a new issue