summaryrefslogtreecommitdiffstats
path: root/crypto/mem_clr.c
diff options
context:
space:
mode:
authorRich Salz <rsalz@akamai.com>2016-02-25 14:29:52 +0100
committerRich Salz <rsalz@openssl.org>2016-02-25 16:04:00 +0100
commit104ce8a9f02d250dd43c255eb7b8747e81b29422 (patch)
tree099edc0f662b3a46d16478c9f559ae75910fecca /crypto/mem_clr.c
parentCVE-2016-0798: avoid memory leak in SRP (diff)
downloadopenssl-104ce8a9f02d250dd43c255eb7b8747e81b29422.tar.xz
openssl-104ce8a9f02d250dd43c255eb7b8747e81b29422.zip
RT4116: Change cleanse to just memset
See also the discussion in https://github.com/openssl/openssl/pull/455 Reviewed-by: Andy Polyakov <appro@openssl.org>
Diffstat (limited to 'crypto/mem_clr.c')
-rw-r--r--crypto/mem_clr.c25
1 files changed, 9 insertions, 16 deletions
diff --git a/crypto/mem_clr.c b/crypto/mem_clr.c
index e6450a12fe..3389919d5f 100644
--- a/crypto/mem_clr.c
+++ b/crypto/mem_clr.c
@@ -59,23 +59,16 @@
#include <string.h>
#include <openssl/crypto.h>
-extern unsigned char cleanse_ctr;
-unsigned char cleanse_ctr = 0;
+/*
+ * Pointer to memset is volatile so that compiler must de-reference
+ * the pointer and can't assume that it points to any function in
+ * particular (such as memset, which it then might further "optimize")
+ */
+typedef void *(*memset_t)(void *,int,size_t);
+
+static volatile memset_t memset_func = memset;
void OPENSSL_cleanse(void *ptr, size_t len)
{
- unsigned char *p = ptr;
- size_t loop = len, ctr = cleanse_ctr;
-
- if (ptr == NULL)
- return;
-
- while (loop--) {
- *(p++) = (unsigned char)ctr;
- ctr += (17 + ((size_t)p & 0xF));
- }
- p = memchr(ptr, (unsigned char)ctr, len);
- if (p)
- ctr += (63 + (size_t)p);
- cleanse_ctr = (unsigned char)ctr;
+ memset_func(ptr, 0, len);
}