diff options
author | Rich Salz <rsalz@akamai.com> | 2016-02-25 14:29:52 +0100 |
---|---|---|
committer | Rich Salz <rsalz@openssl.org> | 2016-02-25 16:04:00 +0100 |
commit | 104ce8a9f02d250dd43c255eb7b8747e81b29422 (patch) | |
tree | 099edc0f662b3a46d16478c9f559ae75910fecca /crypto/mem_clr.c | |
parent | CVE-2016-0798: avoid memory leak in SRP (diff) | |
download | openssl-104ce8a9f02d250dd43c255eb7b8747e81b29422.tar.xz openssl-104ce8a9f02d250dd43c255eb7b8747e81b29422.zip |
RT4116: Change cleanse to just memset
See also the discussion in https://github.com/openssl/openssl/pull/455
Reviewed-by: Andy Polyakov <appro@openssl.org>
Diffstat (limited to 'crypto/mem_clr.c')
-rw-r--r-- | crypto/mem_clr.c | 25 |
1 files changed, 9 insertions, 16 deletions
diff --git a/crypto/mem_clr.c b/crypto/mem_clr.c index e6450a12fe..3389919d5f 100644 --- a/crypto/mem_clr.c +++ b/crypto/mem_clr.c @@ -59,23 +59,16 @@ #include <string.h> #include <openssl/crypto.h> -extern unsigned char cleanse_ctr; -unsigned char cleanse_ctr = 0; +/* + * Pointer to memset is volatile so that compiler must de-reference + * the pointer and can't assume that it points to any function in + * particular (such as memset, which it then might further "optimize") + */ +typedef void *(*memset_t)(void *,int,size_t); + +static volatile memset_t memset_func = memset; void OPENSSL_cleanse(void *ptr, size_t len) { - unsigned char *p = ptr; - size_t loop = len, ctr = cleanse_ctr; - - if (ptr == NULL) - return; - - while (loop--) { - *(p++) = (unsigned char)ctr; - ctr += (17 + ((size_t)p & 0xF)); - } - p = memchr(ptr, (unsigned char)ctr, len); - if (p) - ctr += (63 + (size_t)p); - cleanse_ctr = (unsigned char)ctr; + memset_func(ptr, 0, len); } |