From ca1f667748739a6a0bcce8db79531f0f09d6a8cd Mon Sep 17 00:00:00 2001 From: elektroschmock Date: Wed, 8 May 2019 10:41:59 +0200 Subject: crypto: arm/sha256 - Use memzero_explicit to fill memory with 0 memzero_explicit should be used instead in order to prevent the compiler from optimising away zeroing. Change-Id: I248925e4c3e934a98f1341b6649ca7cb200a7781 (cherry picked from commit af92d4cf4b0a9ffc39fbd242c2659267ea62fb97) --- arch/arm/crypto/sha256_glue.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'arch/arm/crypto') diff --git a/arch/arm/crypto/sha256_glue.c b/arch/arm/crypto/sha256_glue.c index 0d6fc4365..b858c3f3d 100644 --- a/arch/arm/crypto/sha256_glue.c +++ b/arch/arm/crypto/sha256_glue.c @@ -151,7 +151,7 @@ static int sha224_final(struct shash_desc *desc, u8 *out) sha256_final(desc, D); memcpy(out, D, SHA224_DIGEST_SIZE); - memset(D, 0, SHA256_DIGEST_SIZE); + memzero_explicit(D, SHA256_DIGEST_SIZE); return 0; } -- cgit v1.2.3