Commit cb5ebf96 authored by Matt Caswell's avatar Matt Caswell
Browse files

Convert memset calls to OPENSSL_cleanse 



Ensure things really do get cleared when we intend them to.

Addresses an OCAP Audit issue.

Reviewed-by: default avatarAndy Polyakov <appro@openssl.org>
parent 6ad8c482

crypto/bn/bn_lib.c

+1 −1
Original line number Diff line number Diff line
@@ -569,7 +569,7 @@ void BN_clear(BIGNUM *a) 
{

    bn_check_top(a);

    if (a->d != NULL)

        memset(a->d, 0, a->dmax * sizeof(a->d[0]));

        OPENSSL_cleanse(a->d, a->dmax * sizeof(a->d[0]));

    a->top = 0;

    a->neg = 0;

}

crypto/evp/digest.c

+1 −1
Original line number Diff line number Diff line
@@ -285,7 +285,7 @@ int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *size) 
        ctx->digest->cleanup(ctx);

        EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_CLEANED);

    }

    memset(ctx->md_data, 0, ctx->digest->ctx_size);

    OPENSSL_cleanse(ctx->md_data, ctx->digest->ctx_size);

    return ret;

}

crypto/md2/md2_dgst.c

+1 −1
Original line number Diff line number Diff line
@@ -219,6 +219,6 @@ int MD2_Final(unsigned char *md, MD2_CTX *c) 


    for (i = 0; i < 16; i++)

        md[i] = (UCHAR) (p1[i] & 0xff);

    memset((char *)&c, 0, sizeof(c));

    OPENSSL_cleanse(c, sizeof(*c));

    return 1;

}

crypto/md32_common.h

+9 −1
Original line number Diff line number Diff line
@@ -109,6 +109,8 @@ 
 *                                      <appro@fy.chalmers.se>

 */



#include <openssl/crypto.h>



#if !defined(DATA_ORDER_IS_BIG_ENDIAN) && !defined(DATA_ORDER_IS_LITTLE_ENDIAN)

# error "DATA_ORDER must be defined!"

#endif
@@ -329,6 +331,12 @@ int HASH_UPDATE(HASH_CTX *c, const void *data_, size_t len) 
            data += n;

            len -= n;

            c->num = 0;

            /*

             * We use memset rather than OPENSSL_cleanse() here deliberately.

             * Using OPENSSL_cleanse() here could be a performance issue. It

             * will get properly cleansed on finalisation so this isn't a

             * security problem.

             */

            memset(p, 0, HASH_CBLOCK); /* keep it zeroed */

        } else {

            memcpy(p + n, data, len);
@@ -384,7 +392,7 @@ int HASH_FINAL(unsigned char *md, HASH_CTX *c) 
    p -= HASH_CBLOCK;

    HASH_BLOCK_DATA_ORDER(c, p, 1);

    c->num = 0;

    memset(p, 0, HASH_CBLOCK);

    OPENSSL_cleanse(p, HASH_CBLOCK);



#ifndef HASH_MAKE_STRING

# error "HASH_MAKE_STRING must be defined!"

crypto/rand/rand_unix.c

+1 −1
Original line number Diff line number Diff line
@@ -235,7 +235,7 @@ int RAND_poll(void) 
        rnd >>= 8;

    }

    RAND_add(buf, sizeof(buf), ENTROPY_NEEDED);

    memset(buf, 0, sizeof(buf));

    OPENSSL_cleanse(buf, sizeof(buf));



    return 1;

}