[PATCH] Fix potential zeroizer removal (Issue 331)
authorJeffrey Walton <noloader@gmail.com>
Tue, 1 Nov 2016 02:34:59 +0000 (22:34 -0400)
committerLaszlo Boszormenyi (GCS) <gcs@debian.org>
Tue, 27 Jun 2017 19:04:20 +0000 (20:04 +0100)
Gbp-Pq: Name Fix_potential_zeroizer_removal.patch

cast.cpp

index cc62b91548e8cf53b64f3c22b37498d526535429..b09578a0e3fa74db92c9028bed1b947cd28aa38b 100644 (file)
--- a/cast.cpp
+++ b/cast.cpp
@@ -290,7 +290,7 @@ void CAST256::Base::UncheckedSetKey(const byte *userKey, unsigned int keylength,
                }\r
        }\r
 \r
-       memset(kappa, 0, sizeof(kappa));\r
+       SecureWipeBuffer(kappa, 8);\r
 }\r
 \r
 NAMESPACE_END\r