Matt Caswell 5d80fab086 Replace memset with OPENSSL_clear_free() ...

BUF_MEM_free() attempts to cleanse memory using memset immediately prior
to a free. This is at risk of being optimised away by the compiler, so
replace with a call to OPENSSL_clear_free() instead.

With thanks to the Open Crypto Audit Project for reporting this issue.

Reviewed-by: Stephen Henson <steve@openssl.org>

2015-06-10 10:09:57 +01:00

..

buf_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

buf_str.c

Identify and move common internal libcrypto header files

2015-05-14 17:21:40 +02:00

buffer.c

Replace memset with OPENSSL_clear_free()

2015-06-10 10:09:57 +01:00

Makefile

Fix the update target and remove duplicate file updates

2015-05-22 18:44:33 +02:00