]> asedeno.scripts.mit.edu Git - linux.git/commit
net/tls: make sure offload also gets the keys wiped
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 28 Jun 2019 23:11:39 +0000 (16:11 -0700)
committerDavid S. Miller <davem@davemloft.net>
Tue, 2 Jul 2019 02:22:36 +0000 (19:22 -0700)
commitacd3e96d53a24d219f720ed4012b62723ae05da1
tree72f95626e91ff78f4530d1d2cc7425932b9e95fe
parent618bac45937a3dc6126ac0652747481e97000f99
net/tls: make sure offload also gets the keys wiped

Commit 86029d10af18 ("tls: zero the crypto information from tls_context
before freeing") added memzero_explicit() calls to clear the key material
before freeing struct tls_context, but it missed tls_device.c has its
own way of freeing this structure. Replace the missing free.

Fixes: 86029d10af18 ("tls: zero the crypto information from tls_context before freeing")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/tls.h
net/tls/tls_device.c
net/tls/tls_main.c