From 28cd1d4864940265e40eecac8df838b0dd72ca5c Mon Sep 17 00:00:00 2001 From: Jason King Date: Mon, 22 Jan 2018 19:28:10 +0000 Subject: OS-6325 PKCS#11 softtoken should use explicit_bzero Reviewed by: Dan McDonald Reviewed by: Alex Wilson Approved by: Dan McDonald --- usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) (limited to 'usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c') diff --git a/usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c b/usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c index 143f488490..670a6c7666 100644 --- a/usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c +++ b/usr/src/lib/pkcs11/pkcs11_kernel/common/kernelUtil.c @@ -372,11 +372,8 @@ free_key_attributes(crypto_key_t *key) if (key->ck_format == CRYPTO_KEY_ATTR_LIST && (key->ck_count > 0) && key->ck_attrs != NULL) { for (i = 0; i < key->ck_count; i++) { - if (key->ck_attrs[i].oa_value != NULL) { - bzero(key->ck_attrs[i].oa_value, - key->ck_attrs[i].oa_value_len); - free(key->ck_attrs[i].oa_value); - } + freezero(key->ck_attrs[i].oa_value, + key->ck_attrs[i].oa_value_len); } free(key->ck_attrs); } -- cgit v1.2.3