Fix an information leak in the RSA padding check code.
authorBernd Edlinger <bernd.edlinger@hotmail.de>
Mon, 31 Jul 2017 18:38:26 +0000 (20:38 +0200)
committerBernd Edlinger <bernd.edlinger@hotmail.de>
Mon, 31 Jul 2017 18:38:26 +0000 (20:38 +0200)
commit57ad215615071a7dc578e390de61ae163b15df9d
tree75c6d78e4947d616bb973556b7cb30cb6c44ba14
parent5292833132cc863b66574fe2bbf55e4b2eff7949
Fix an information leak in the RSA padding check code.
The memory blocks contain secret data and must be
cleared before returning to the system heap.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4063)
crypto/rsa/rsa_oaep.c
crypto/rsa/rsa_pk1.c