]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add a way to cleanse params arrays
authorSimo Sorce <simo@redhat.com>
Mon, 28 Jul 2025 12:32:54 +0000 (08:32 -0400)
committerDmitry Belyavskiy <beldmit@gmail.com>
Wed, 22 Oct 2025 19:08:36 +0000 (21:08 +0200)
commite765de94eefd28262504d96e19146950a13ed826
tree008fbba8e0399321696364e25c33615372f7b079
parent7420ab4866e69da6f0d52b09c6d80356b19ee128
Add a way to cleanse params arrays

This uses the return_size field of the last terminating parameter
similaraly to how secure memory uses the data and data_size fields,
to hold the total size of memory allocated for params.
This is then used to be able to call OPENSSL_cleanse on the params
fields via the new OSSL_PARAM_clear_free() call.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28108)
crypto/param_build.c
crypto/params_dup.c
doc/man3/OSSL_PARAM_dup.pod
include/openssl/params.h
util/libcrypto.num