yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-10-18 12:21:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

Allow compile-time alternate to mbedtls_zeroize()

Browse source 
Add a new macro MBEDTLS_UTILS_ZEROIZE that allows users to configure
mbedtls_zeroize() to an alternative definition when defined. If the
macro is not defined, then mbed TLS will use the default definition of
the function.
This commit is contained in:
Andres Amaya Garcia 2017-10-25 09:51:14 +01:00 committed by Andres Amaya Garcia
parent e32df087fb
commit b1262a3bdb
2 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
include/mbedtls/config.h
View file

@ -2852,6 +2852,14 @@
*/
#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
/**
* \def MBEDTLS_UTILS_ZEROIZE_ALT
*
* Uncomment the macro to let mbed TLS use your alternate implementation of
* mbedtls_zeroize().
*/
//#define MBEDTLS_UTILS_ZEROIZE_ALT
/* \} name SECTION: Customisation configuration options */
/* Target and application specific configurations */

8
library/utils.c
View file

@ -19,10 +19,17 @@
* This file is part of mbed TLS (https://tls.mbed.org)
*/
#if !defined(MBEDTLS_CONFIG_FILE)
#include "mbedtls/config.h"
#else
#include MBEDTLS_CONFIG_FILE
#endif
#include "mbedtls/utils.h"
#include <stddef.h>
#if !defined(MBEDTLS_UTILS_ZEROIZE_ALT)
/* This implementation should never be optimized out by the compiler */
void mbedtls_zeroize( void *buf, size_t len )
{
@ -31,3 +38,4 @@ void mbedtls_zeroize( void *buf, size_t len )
while( len-- )
*p++ = 0;
}
#endif /* MBEDTLS_UTILS_ZEROIZE_ALT */