From: Nikos Mavrogiannopoulos <nmav@redhat.com>
Date: Mon, 7 Jul 2014 10:13:31 +0000 (+0200)
Subject: mpi: use zeroize_key() instead of memset()
X-Git-Tag: gnutls_3_3_6~48
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=1f50bf59eb11078dafdcb88bb570da7db0e7203a;p=thirdparty%2Fgnutls.git

mpi: use zeroize_key() instead of memset()
---

diff --git a/lib/nettle/mpi.c b/lib/nettle/mpi.c
index 7940b3caa1..1324263e7c 100644
--- a/lib/nettle/mpi.c
+++ b/lib/nettle/mpi.c
@@ -227,7 +227,7 @@ static void wrap_nettle_mpi_release(bigint_t a)
 
 static void wrap_nettle_mpi_clear(bigint_t a)
 {
-	memset(TOMPZ(a)[0]._mp_d, 0,
+	zeroize_key(TOMPZ(a)[0]._mp_d,
 	       TOMPZ(a)[0]._mp_alloc * sizeof(mp_limb_t));
 }
 
diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c
index 4422ff02ab..0bb6a2dbb9 100644
--- a/lib/nettle/pk.c
+++ b/lib/nettle/pk.c
@@ -67,14 +67,14 @@ static void rnd_func(void *_ctx, unsigned length, uint8_t * data)
 static void
 ecc_scalar_zclear (struct ecc_scalar *s)
 {
-        memset(s->p, 0, ecc_size(s->ecc)*sizeof(mp_limb_t));
+        zeroize_key(s->p, ecc_size(s->ecc)*sizeof(mp_limb_t));
         ecc_scalar_clear(s);
 }
 
 static void 
 ecc_point_zclear (struct ecc_point *p)
 {
-        memset(p->p, 0, ecc_size_a(p->ecc)*sizeof(mp_limb_t));
+        zeroize_key(p->p, ecc_size_a(p->ecc)*sizeof(mp_limb_t));
         ecc_point_clear(p);
 }