lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 1 Feb 2016 22:35:21 +0800 From: Herbert Xu <herbert@...dor.apana.org.au> To: Dan Carpenter <dan.carpenter@...cle.com> Cc: Stephan Mueller <smueller@...onox.de>, "David S. Miller" <davem@...emloft.net>, linux-crypto@...r.kernel.org, linux-kernel@...r.kernel.org, kernel-janitors@...r.kernel.org Subject: Re: [patch] crypto: keywrap - memzero the correct memory On Sat, Jan 30, 2016 at 05:38:28PM +0300, Dan Carpenter wrote: > We're clearing the wrong memory. The memory corruption is likely > harmless because we weren't going to use that stack memory again but not > zeroing is a potential information leak. > > Fixes: e28facde3c39 ('crypto: keywrap - add key wrapping block chaining mode') > Signed-off-by: Dan Carpenter <dan.carpenter@...cle.com> Applied. -- Email: Herbert Xu <herbert@...dor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Powered by blists - more mailing lists