diff options
| author | Sabrina Dubroca <sd@queasysnail.net> | 2018-09-12 17:44:43 +0200 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2018-09-29 02:55:52 -0700 |
| commit | 77971ea816ba7eee08f1c98474ef3fe05c78a4ea (patch) | |
| tree | a3c20c0186c21021444a22e439ca221b3b4239d7 /net/tls | |
| parent | 13d1bdc70bc25de0f5a31988776bdbe90745a4cd (diff) | |
tls: clear key material from kernel memory when do_tls_setsockopt_conf fails
[ Upstream commit c844eb46b7d43c2cf760169df5ae1d5b033af338 ]
Fixes: 3c4d7559159b ("tls: kernel TLS support")
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: Sabrina Dubroca <sd@queasysnail.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/tls')
| -rw-r--r-- | net/tls/tls_main.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/tls/tls_main.c b/net/tls/tls_main.c index 4e28210e0343..2ccf194c3ebb 100644 --- a/net/tls/tls_main.c +++ b/net/tls/tls_main.c @@ -502,7 +502,7 @@ static int do_tls_setsockopt_conf(struct sock *sk, char __user *optval, goto out; err_crypto_info: - memset(crypto_info, 0, sizeof(*crypto_info)); + memzero_explicit(crypto_info, sizeof(union tls_crypto_context)); out: return rc; } |