[openssl] master update
Dr. Paul Dale
pauli at openssl.org
Thu Nov 21 04:29:02 UTC 2019
The branch master has been updated
via cff7d199e0dc51ae939de5fb7702aab2a9ef30fc (commit)
from 6a835fcfb10ba004498f9e39873db3d2b9011609 (commit)
- Log -----------------------------------------------------------------
commit cff7d199e0dc51ae939de5fb7702aab2a9ef30fc
Author: Pauli <paul.dale at oracle.com>
Date: Wed Nov 20 13:20:01 2019 +1000
ECDSA: don't clear free memory after verify.
Verifications are public, there is no need to clear the used storage before
freeing it.
Reviewed-by: Richard Levitte <levitte at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/10475)
-----------------------------------------------------------------------
Summary of changes:
crypto/ec/ecdsa_ossl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/crypto/ec/ecdsa_ossl.c b/crypto/ec/ecdsa_ossl.c
index 5593d5d68c..8de22ba910 100644
--- a/crypto/ec/ecdsa_ossl.c
+++ b/crypto/ec/ecdsa_ossl.c
@@ -344,7 +344,7 @@ int ossl_ecdsa_verify(int type, const unsigned char *dgst, int dgst_len,
goto err;
ret = ECDSA_do_verify(dgst, dgst_len, s, eckey);
err:
- OPENSSL_clear_free(der, derlen);
+ OPENSSL_free(der);
ECDSA_SIG_free(s);
return ret;
}
More information about the openssl-commits
mailing list