diff options
| author |   deraadt <deraadt@openbsd.org> | 2011-01-10 03:23:30 +0000 |
|---|---|---|
| committer | deraadt <deraadt@openbsd.org> | 2011-01-10 03:23:30 +0000 |
| commit | 63f875dac1148834243136d0d04ad874467994fb (patch) | |
| tree | e2abcbbf9c16da2c2abc9c48ad525986c9d0189f | |
| parent | zero another intermediate key storage area (diff) | |
| download | wireguard-openbsd-63f875dac1148834243136d0d04ad874467994fb.tar.xz wireguard-openbsd-63f875dac1148834243136d0d04ad874467994fb.zip | |
OK, this is getting silly, but we might as well zero the entropy buffer
supplied by root (it can be large enough to overwhelm the entropy buffer,
and we are doing a re-key almost immediately)
| -rw-r--r-- | sys/dev/rnd.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/dev/rnd.c b/sys/dev/rnd.c index cdc6269aa13..60eaf9f3446 100644 --- a/sys/dev/rnd.c +++ b/sys/dev/rnd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: rnd.c,v 1.133 2011/01/10 02:44:18 deraadt Exp $ */ +/* $OpenBSD: rnd.c,v 1.134 2011/01/10 03:23:30 deraadt Exp $ */ /* * Copyright (c) 2011 Theo de Raadt. @@ -793,6 +793,7 @@ randomwrite(dev_t dev, struct uio *uio, int flags) if (newdata) arc4_init(NULL, NULL); + bzero(buf, POOLBYTES); free(buf, M_TEMP); return ret; } |