From: Jeffrey Walton <noloader@gmail.com>
Date: Tue, 1 Nov 2016 02:34:59 +0000 (-0400)
Subject: [PATCH] Fix potential zeroizer removal (Issue 331)
X-Git-Tag: archive/raspbian/8.7.0+git220824-1+rpi1~1^2^2^2^2~5
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=8b50b1abc9d70ba9e6b60ebdb37d387ca36aa6ed;p=libcrypto%2B%2B.git

[PATCH] Fix potential zeroizer removal (Issue 331)


Gbp-Pq: Name Fix_potential_zeroizer_removal.patch
---

diff --git a/cast.cpp b/cast.cpp
index cc62b91..b09578a 100644
--- a/cast.cpp
+++ b/cast.cpp
@@ -290,7 +290,7 @@ void CAST256::Base::UncheckedSetKey(const byte *userKey, unsigned int keylength,
 		}
 	}
 
-	memset(kappa, 0, sizeof(kappa));
+	SecureWipeBuffer(kappa, 8);
 }
 
 NAMESPACE_END