This memset() in the ubsec ENGINE is a bug. Zeroing out the result array
authorGeoff Thorpe <geoff@openssl.org>
Fri, 6 Jun 2003 17:54:22 +0000 (17:54 +0000)
committerGeoff Thorpe <geoff@openssl.org>
Fri, 6 Jun 2003 17:54:22 +0000 (17:54 +0000)
commitfd509d6da52e8cb34dc2a2cdc122fb20227cdee8
tree557e05c3a9e91b0150d9ad8a79e544a10e72fea5
parent7fd79b985892988927cb0c8fb97a23dc68ec6b28
This memset() in the ubsec ENGINE is a bug. Zeroing out the result array
should not be necessary in any case, but more importantly the result and
input BIGNUMs could be the same, in which case this is clearly a problem.

Submitted by: Jonathan Hersch
Reviewed by: Joe Orton
Approved by: Geoff Thorpe
crypto/engine/hw_ubsec.c