zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fips: change integrity check zeroization to use the OPENSSL_PEDANTIC_ZEROIZATION define

Browse Source 
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26068)
This commit is contained in:
Pauli 2024-11-27 11:21:08 +11:00 committed by Tomas Mraz
parent 8d09e61be6
commit 01cfee2cdf
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
providers/fips/self_test.c
View File

@ -289,7 +289,9 @@ err:
OSSL_SELF_TEST_onend(ev, ret); OSSL_SELF_TEST_onend(ev, ret);
EVP_MAC_CTX_free(ctx); EVP_MAC_CTX_free(ctx);
EVP_MAC_free(mac); EVP_MAC_free(mac);
# ifdef OPENSSL_PEDANTIC_ZEROIZATION
OPENSSL_cleanse(out, sizeof(out)); OPENSSL_cleanse(out, sizeof(out));
# endif
return ret; return ret;
} }
#endif /* OPENSSL_NO_FIPS_POST */ #endif /* OPENSSL_NO_FIPS_POST */