Re: [PATCH net] net/tls: make sure offload also gets the keys wiped
From: David Miller <davem@davemloft.net>
Date: 2019-07-02 02:23:55
From: David Miller <davem@davemloft.net>
Date: 2019-07-02 02:23:55
From: Jakub Kicinski <redacted> Date: Fri, 28 Jun 2019 16:11:39 -0700
Commit 86029d10af18 ("tls: zero the crypto information from tls_context
before freeing") added memzero_explicit() calls to clear the key material
before freeing struct tls_context, but it missed tls_device.c has its
own way of freeing this structure. Replace the missing free.
Fixes: 86029d10af18 ("tls: zero the crypto information from tls_context before freeing")
Signed-off-by: Jakub Kicinski <redacted>
Reviewed-by: Dirk van der Merwe <redacted>Applied and queued up for -stable.