]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Restore OpenSSL 1.0 compatibility in softpkcs11 1218/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 20 Sep 2021 15:14:29 +0000 (11:14 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 20 Sep 2021 15:14:29 +0000 (11:14 -0400)
Commit 00de1aad7b3647b91017c7009b0bc65cd0c8b2e0 used
OPENSSL_clear_free(), which was added in OpenSSL 1.1.  Use
OPENSSL_cleanse() and OPENSSL_free() instead.

src/tests/softpkcs11/main.c

index 86b4ef711bc8beb762ebb787c8a0d19c0f6b98f3..82b05ff0da909324c7e99d4be4e7c348f4091ecd 100644 (file)
@@ -1590,7 +1590,8 @@ C_Encrypt(CK_SESSION_HANDLE hSession,
 
     ret = CKR_OK;
 out:
-    OPENSSL_clear_free(buffer, buffer_len);
+    OPENSSL_cleanse(buffer, buffer_len);
+    OPENSSL_free(buffer);
     EVP_PKEY_CTX_free(ctx);
     return ret;
 }
@@ -1732,7 +1733,8 @@ C_Decrypt(CK_SESSION_HANDLE hSession,
 
     ret = CKR_OK;
 out:
-    OPENSSL_clear_free(buffer, buffer_len);
+    OPENSSL_cleanse(buffer, buffer_len);
+    OPENSSL_free(buffer);
     EVP_PKEY_CTX_free(ctx);
     return ret;
 }
@@ -1879,7 +1881,8 @@ C_Sign(CK_SESSION_HANDLE hSession,
 
     ret = CKR_OK;
 out:
-    OPENSSL_clear_free(buffer, buffer_len);
+    OPENSSL_cleanse(buffer, buffer_len);
+    OPENSSL_free(buffer);
     EVP_PKEY_CTX_free(ctx);
     return ret;
 }