[openssl] master update

Dr. Paul Dale pauli at openssl.org
Thu Nov 21 04:29:02 UTC 2019

The branch master has been updated
       via  cff7d199e0dc51ae939de5fb7702aab2a9ef30fc (commit)
      from  6a835fcfb10ba004498f9e39873db3d2b9011609 (commit)

- Log -----------------------------------------------------------------
commit cff7d199e0dc51ae939de5fb7702aab2a9ef30fc
Author: Pauli <paul.dale at oracle.com>
Date:   Wed Nov 20 13:20:01 2019 +1000

    ECDSA: don't clear free memory after verify.
    Verifications are public, there is no need to clear the used storage before
    freeing it.
    Reviewed-by: Richard Levitte <levitte at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/10475)


Summary of changes:
 crypto/ec/ecdsa_ossl.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crypto/ec/ecdsa_ossl.c b/crypto/ec/ecdsa_ossl.c
index 5593d5d68c..8de22ba910 100644
--- a/crypto/ec/ecdsa_ossl.c
+++ b/crypto/ec/ecdsa_ossl.c
@@ -344,7 +344,7 @@ int ossl_ecdsa_verify(int type, const unsigned char *dgst, int dgst_len,
         goto err;
     ret = ECDSA_do_verify(dgst, dgst_len, s, eckey);
-    OPENSSL_clear_free(der, derlen);
+    OPENSSL_free(der);
     return ret;

More information about the openssl-commits mailing list