Commit e2e69dce authored by Nicola Tuveri's avatar Nicola Tuveri
Browse files

Clear BN_FLG_CONSTTIME on BN_CTX_get() 



(cherry picked from commit c8147d37)

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8253)
parent 3c97136e

crypto/bn/bn_ctx.c

+3 −1
Original line number Diff line number Diff line 
/*

 * Copyright 2000-2018 The OpenSSL Project Authors. All Rights Reserved.

 * Copyright 2000-2019 The OpenSSL Project Authors. All Rights Reserved.

 *

 * Licensed under the OpenSSL license (the "License").  You may not use

 * this file except in compliance with the License.  You can obtain a copy
@@ -227,6 +227,8 @@ BIGNUM *BN_CTX_get(BN_CTX *ctx) 
    }

    /* OK, make sure the returned bignum is "zero" */

    BN_zero(ret);

    /* clear BN_FLG_CONSTTIME if leaked from previous frames */

    ret->flags &= (~BN_FLG_CONSTTIME);

    ctx->used++;

    CTXDBG_RET(ctx, ret);

    return ret;