md5_final() didn't properly clear the whole MD5 context. Also changed to use

safe_memset(). Patch by Andrey Panin

--HG--
branch : HEAD

diff --git a/src/lib/md5.c b/src/lib/md5.c
index e66929c734f79f554196f9990efce3687f2536f5..55a756800db0fd2b82bb18f33b9a8f94eaa3aa65 100644 (file)
--- a/src/lib/md5.c
+++ b/src/lib/md5.c
@@ -16,6 +16,7 @@
  */
 
 #include "lib.h"
+#include "safe-memset.h"
 #include "md5.h"
 
 /*
@@ -267,7 +268,7 @@ void md5_final(struct md5_context *ctx, unsigned char result[16])
        result[14] = ctx->d >> 16;
        result[15] = ctx->d >> 24;
 
-       memset(ctx, 0, sizeof(ctx));
+       safe_memset(ctx, 0, sizeof(*ctx));
 }
 
 void md5_get_digest(const void *data, size_t size, unsigned char result[16])