From: Nicola Tuveri <nic.tuv@gmail.com>
Date: Fri, 8 Feb 2019 10:42:25 +0000 (+0200)
Subject: Clear BN_FLG_CONSTTIME on BN_CTX_get()
X-Git-Tag: OpenSSL_1_0_2r~6
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=9acdddf1acd6f6be41ddb711b6b55fe7f5481320;p=oweals%2Fopenssl.git

Clear BN_FLG_CONSTTIME on BN_CTX_get()

(cherry picked from commit c8147d37ccaaf28c430d3fb45a14af36597e48b8)

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/8295)
---

diff --git a/crypto/bn/bn_ctx.c b/crypto/bn/bn_ctx.c
index 526c6a046d..3391134d7b 100644
--- a/crypto/bn/bn_ctx.c
+++ b/crypto/bn/bn_ctx.c
@@ -299,6 +299,8 @@ BIGNUM *BN_CTX_get(BN_CTX *ctx)
     }
     /* OK, make sure the returned bignum is "zero" */
     BN_zero(ret);
+    /* clear BN_FLG_CONSTTIME if leaked from previous frames */
+    ret->flags &= (~BN_FLG_CONSTTIME);
     ctx->used++;
     CTXDBG_RET(ctx, ret);
     return ret;