• Eric Biggers's avatar
    fscrypt: zeroize fscrypt_info before freeing · 6f99756d
    Eric Biggers authored
    memset the struct fscrypt_info to zero before freeing.  This isn't
    really needed currently, since there's no secret key directly in the
    fscrypt_info.  But there's a decent chance that someone will add such a
    field in the future, e.g. in order to use an API that takes a raw key
    such as siphash().  So it's good to do this as a hardening measure.
    Signed-off-by: default avatarEric Biggers <ebiggers@google.com>
    6f99756d
keysetup.c 14.1 KB