]> git.ipfire.org Git - thirdparty/hostap.git/commit - src/rsn_supp/wpa.c
WPA: Explicitly clear the buffer used for decrypting Key Data
authorJouni Malinen <j@w1.fi>
Sun, 20 Dec 2015 08:52:30 +0000 (10:52 +0200)
committerJouni Malinen <j@w1.fi>
Sun, 20 Dec 2015 08:52:30 +0000 (10:52 +0200)
commitcd5895e8c5aac5620135085af606e698debdbf2a
tree884c5c7d17e9858fbabb1a596606f62a03cd665a
parenta551da6aae172c53f81867a105399c5db9071aa8
WPA: Explicitly clear the buffer used for decrypting Key Data

When AES-WRAP was used to protect the EAPOL-Key Key Data field, this was
decrypted using a temporary heap buffer with aes_unwrap(). That buffer
was not explicitly cleared, so it was possible for the group keys to
remain in memory unnecessarily until the allocated area was reused.
Clean this up by clearing the temporary allocation explicitly before
freeing it.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/rsn_supp/wpa.c