[openssl] OpenSSL_1_0_2-stable update

[bernd.edlinger at hotmail.de]

The branch OpenSSL_1_0_2-stable has been updated
       via  dbf71ae457dfa5632518612b58efccd40f528f26 (commit)
      from  6555a8941bd6be5790d3b45c41de23234a8e527f (commit)


- Log -----------------------------------------------------------------
commit dbf71ae457dfa5632518612b58efccd40f528f26
Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
Date:   Sun Mar 17 10:02:07 2019 +0100

    Clear the secret point in ecdh_compute_key
    
    Reviewed-by: Paul Dale <paul.dale at oracle.com>
    (Merged from https://github.com/openssl/openssl/pull/8502)

-----------------------------------------------------------------------

Summary of changes:
 crypto/ecdh/ech_ossl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/ecdh/ech_ossl.c b/crypto/ecdh/ech_ossl.c
index d3b0524..8b69ce5 100644
--- a/crypto/ecdh/ech_ossl.c
+++ b/crypto/ecdh/ech_ossl.c
@@ -207,7 +207,7 @@ static int ecdh_compute_key(void *out, size_t outlen, const EC_POINT *pub_key,
 
  err:
     if (tmp)
-        EC_POINT_free(tmp);
+        EC_POINT_clear_free(tmp);
     if (ctx)
         BN_CTX_end(ctx);
     if (ctx)