Bug #9642

PKCS#11 softtoken should use explicit_bzero

Added by Jason King 4 months ago. Updated about 2 months ago.

Status:ClosedStart date:2018-07-06
Priority:NormalDue date:
Assignee:Jason King% Done:

0%

Category:lib - userland libraries
Target version:-
Difficulty:Medium Tags:needs-triage

Description

Upstream of Joyent OS-6325.

The PKCS#11 soft token (and metaslot) code predates the existence of explicit_bzero(). They should be updated to use these when freeing structures that hold keys and data.

History

#1 Updated by Jason King about 2 months ago

  • Status changed from New to Closed
commit a8793c7605e0b82f2725537adafca6127cdbd6ce
Author: Jason King <jason.king@joyent.com>
Date:   Mon Jan 22 19:28:10 2018 +0000

    9642 PKCS#11 softtoken should use explicit_bzero
    Reviewed by: Yuri Pankov <yuripv@yuripv.net>
    Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk>
    Reviewed by: Ken Mays <kmays2000@gmail.com>
    Reviewed by: Toomas Soome <tsoome@me.com>
    Approved by: Dan McDonald <danmcd@joyent.com>

Also available in: Atom