yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-01-08 09:05:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Backport 2.1:Set PEM buffer to zero before freeing

Browse source 
Set PEM buffer to zero before freeing it, to avoid private keys
being leaked to memory after releasing it.
This commit is contained in:
Ron Eldor 2017-09-05 15:34:35 +03:00
parent 1fe5e8ab44
commit 4dc8af77a9
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ChangeLog
View file

@ -1,5 +1,11 @@
mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS x.x.x branch released xxxx-xx-xx
Security
* Set PEM buffer to zero before freeing it, to avoid decoded private keys
being leaked to memory after release.
= mbed TLS 2.1.9 branch released 2017-08-10
Security

1
library/pem.c
View file

@ -387,6 +387,7 @@ int mbedtls_pem_read_buffer( mbedtls_pem_context *ctx, const char *header, const
void mbedtls_pem_free( mbedtls_pem_context *ctx )
{
memset( ctx->buf, 0, ctx->buflen );
mbedtls_free( ctx->buf );
mbedtls_free( ctx->info );