]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net/tls: make sure offload also gets the keys wiped
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 28 Jun 2019 23:11:39 +0000 (16:11 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 28 Jul 2019 06:28:30 +0000 (08:28 +0200)
commit5edaba9e9e06b9c310eeec995ca7320c2dc64f2b
tree44fdddf0cef86cbf3c4427441e06ae381381ad84
parent7a78bda3cad948939f006cb923893184a30a8d75
net/tls: make sure offload also gets the keys wiped

[ Upstream commit acd3e96d53a24d219f720ed4012b62723ae05da1 ]

Commit 86029d10af18 ("tls: zero the crypto information from tls_context
before freeing") added memzero_explicit() calls to clear the key material
before freeing struct tls_context, but it missed tls_device.c has its
own way of freeing this structure. Replace the missing free.

Fixes: 86029d10af18 ("tls: zero the crypto information from tls_context before freeing")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/net/tls.h
net/tls/tls_device.c
net/tls/tls_main.c