From 3ce2fdabe6e33952bf3011acf5b68107e6352603 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Fri, 24 Jun 2016 23:37:27 +0100 Subject: Convert memset calls to OPENSSL_cleanse Ensure things really do get cleared when we intend them to. Addresses an OCAP Audit issue. Reviewed-by: Andy Polyakov --- crypto/md2/md2_dgst.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'crypto/md2') diff --git a/crypto/md2/md2_dgst.c b/crypto/md2/md2_dgst.c index b43cd4f489..ff062fd472 100644 --- a/crypto/md2/md2_dgst.c +++ b/crypto/md2/md2_dgst.c @@ -168,6 +168,6 @@ int MD2_Final(unsigned char *md, MD2_CTX *c) for (i = 0; i < 16; i++) md[i] = (UCHAR) (p1[i] & 0xff); - memset(&c, 0, sizeof(c)); + OPENSSL_cleanse(c, sizeof(*c)); return 1; } -- cgit v1.2.1