mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
8b9cf1bc2c
If the output of a blake2[b|s] digest isn't a multipl of 8, then a stack buffer is used to compute the final output, which is left un-zeroed prior to return, allowing the potential leak of key data. Ensure that, if the stack variable is used, it gets cleared prior to return. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/23173) |
||
---|---|---|
.. | ||
blake2_impl.h | ||
blake2_prov.c | ||
blake2b_prov.c | ||
blake2s_prov.c | ||
build.info | ||
digestcommon.c | ||
md2_prov.c | ||
md4_prov.c | ||
md5_prov.c | ||
md5_sha1_prov.c | ||
mdc2_prov.c | ||
null_prov.c | ||
ripemd_prov.c | ||
sha2_prov.c | ||
sha3_prov.c | ||
sm3_prov.c | ||
wp_prov.c |