[openssl] OpenSSL_1_1_0-stable update

bernd.edlinger at hotmail.de bernd.edlinger at hotmail.de
Mon Mar 18 21:31:36 UTC 2019


The branch OpenSSL_1_1_0-stable has been updated
       via  c5bc42d7a131cf7a6a2ebd97a7a4a559d01af0f9 (commit)
      from  7ebbb293e1d68c014e50dc49944aba0b72f35074 (commit)


- Log -----------------------------------------------------------------
commit c5bc42d7a131cf7a6a2ebd97a7a4a559d01af0f9
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Sun Mar 17 09:48:15 2019 +0100

    Clear the secret point in ecdh_simple_compute_key
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/8501)
    
    (cherry picked from commit 1ff2c992c24c330c0d40708b4169b862563d6aab)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ec/ecdh_ossl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/ec/ecdh_ossl.c b/crypto/ec/ecdh_ossl.c
index a865145..2d620cb 100644
--- a/crypto/ec/ecdh_ossl.c
+++ b/crypto/ec/ecdh_ossl.c
@@ -138,7 +138,7 @@ int ecdh_simple_compute_key(unsigned char **pout, size_t *poutlen,
     ret = 1;
 
  err:
-    EC_POINT_free(tmp);
+    EC_POINT_clear_free(tmp);
     if (ctx)
         BN_CTX_end(ctx);
     BN_CTX_free(ctx);


More information about the openssl-commits mailing list