Commit 168ed654 authored Sep 28, 2017 by Tudor Ambarus Committed by Marcel Holtmann Oct 06, 2017

Bluetooth: ecdh_helper - fix leak of private key

tmp buffer contains the swapped private key. In case the setkey call
failed, the tmp buffer was freed without clearing the private key.

Zeroize the temporary buffer so we don't leak the private key.

Signed-off-by: Tudor Ambarus <tudor.ambarus@microchip.com>
Signed-off-by: Marcel Holtmann <marcel@holtmann.org>

parent 3814baf3

net/bluetooth/ecdh_helper.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -122,7 +122,7 @@ int compute_ecdh_secret(struct crypto_kpp *tfm, const u8 public_key[64],
		free_req:
		kpp_request_free(req);
		free_tmp:
		kfree(tmp);
		kzfree(tmp);
		return err;
		}