Jakub Kicinski fde351aeff net/tls: make sure offload also gets the keys wiped ...

[ Upstream commit acd3e96d53a24d219f720ed4012b62723ae05da1 ]

Commit 86029d10af ("tls: zero the crypto information from tls_context
before freeing") added memzero_explicit() calls to clear the key material
before freeing struct tls_context, but it missed tls_device.c has its
own way of freeing this structure. Replace the missing free.

Fixes: 86029d10af ("tls: zero the crypto information from tls_context before freeing")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-07-28 08:29:27 +02:00

..

Kconfig

net/tls: Add generic NIC offload infrastructure

2018-05-01 09:42:47 -04:00

Makefile

net/tls: Add generic NIC offload infrastructure

2018-05-01 09:42:47 -04:00

tls_device_fallback.c

net/tls: avoid NULL pointer deref on nskb->sk in fallback

2019-05-05 14:42:38 +02:00

tls_device.c

net/tls: make sure offload also gets the keys wiped

2019-07-28 08:29:27 +02:00

tls_main.c

net/tls: make sure offload also gets the keys wiped

2019-07-28 08:29:27 +02:00

tls_sw.c

net/tls: don't leak IV and record seq when offload fails

2019-05-02 09:59:01 +02:00