upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2025-12-24 00:29:58 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

- Use explicit bzero for wiping clear buffer of hash in cachedb,

Browse source 
reported by Eric Sesterhenn from X41 D-Sec.
This commit is contained in:
W.C.A. Wijngaards 2019-09-11 15:31:03 +02:00
parent e45e9f1ce0
commit 13d96540de
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
cachedb/cachedb.c
View file

@ -349,7 +349,11 @@ calc_hash(struct module_qstate* qstate, char* buf, size_t len)
/* hash the buffer */ /* hash the buffer */
secalgo_hash_sha256(clear, clen, hash); secalgo_hash_sha256(clear, clen, hash);
#ifdef HAVE_EXPLICIT_BZERO
explicit_bzero(clear, clen);
#else
memset(clear, 0, clen); memset(clear, 0, clen);
#endif
/* hex encode output for portability (some online dbs need /* hex encode output for portability (some online dbs need
* no nulls, no control characters, and so on) */ * no nulls, no control characters, and so on) */

4
doc/Changelog
View file

@ -1,3 +1,7 @@
11 September 2019: Wouter
- Use explicit bzero for wiping clear buffer of hash in cachedb,
reported by Eric Sesterhenn from X41 D-Sec.
9 September 2019: Wouter 9 September 2019: Wouter
- Fix #72: configure --with-syslog-facility=LOCAL0-7 with default - Fix #72: configure --with-syslog-facility=LOCAL0-7 with default
LOG_DAEMON (as before) can set the syslog facility that the server LOG_DAEMON (as before) can set the syslog facility that the server