aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHerbert Xu <herbert@gondor.apana.org.au>2015-04-20 22:46:49 -0400
committerHerbert Xu <herbert@gondor.apana.org.au>2015-04-21 21:30:21 -0400
commitb617b702da4e922277806f81c411d3051107d462 (patch)
tree580d9202c8b14f0798c16e14be7beeb5cd08f440
parent654ae152b3d1f3d5d473d845a403e4b5c1a39389 (diff)
crypto: rng - Zero seed in crypto_rng_reset
If we allocate a seed on behalf ot the user in crypto_rng_reset, we must ensure that it is zeroed afterwards or the RNG may be compromised. Reported-by: Stephan Mueller <smueller@chronox.de> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
-rw-r--r--crypto/rng.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/rng.c b/crypto/rng.c
index 055e276427b1..13155058b193 100644
--- a/crypto/rng.c
+++ b/crypto/rng.c
@@ -53,7 +53,7 @@ int crypto_rng_reset(struct crypto_rng *tfm, const u8 *seed, unsigned int slen)
53 53
54 err = crypto_rng_alg(tfm)->seed(tfm, seed, slen); 54 err = crypto_rng_alg(tfm)->seed(tfm, seed, slen);
55 55
56 kfree(buf); 56 kzfree(buf);
57 return err; 57 return err;
58} 58}
59EXPORT_SYMBOL_GPL(crypto_rng_reset); 59EXPORT_SYMBOL_GPL(crypto_rng_reset);