[openssl/openssl] e38098: cms: clear temporary key buffers on failure
"'Unjuno' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.0/[email protected]> |
Branch: refs/heads/openssl-3.0
Home: https://github.com/openssl/openssl
Commit: e38098c20a0cb13daedc2ed0ec8c417814a60d1c
https://github.com/openssl/openssl/commit/e38098c20a0cb13daedc2ed0ec8c417814a60d1c
Author: unjuno <[email protected]>
Date: 2026-08-14 (Fri, 14 Aug 2026)
Changed paths:
M crypto/cms/cms_env.c
M crypto/cms/cms_kari.c
M crypto/cms/cms_pwri.c
Log Message:
-----------
cms: clear temporary key buffers on failure
Use OPENSSL_clear_free() with the original allocation length on the
KARI, KEKRI, and PWRI failure paths. This is defense-in-depth
hardening at the CMS/provider boundary.
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Dmitry Belyavskiy <[email protected]>
Merge-date: Fri Aug 14 06:38:29 2026
Merged-from: https://github.com/openssl/openssl/pull/32303
(cherry picked from commit 57b84ed1cf9b6c6fe8230be85869351ce2e8e839)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.0/4f08f8-e38098%40github.com.