This memset() in the ubsec ENGINE is a bug. Zeroing out the result array
authorGeoff Thorpe <geoff@openssl.org>
Fri, 6 Jun 2003 17:51:34 +0000 (17:51 +0000)
committerGeoff Thorpe <geoff@openssl.org>
Fri, 6 Jun 2003 17:51:34 +0000 (17:51 +0000)
commitdcfb57c736c2591c80b40d40e5f3a664882fb738
tree05a4e31d8e0ae70e377f58e518c8ccae62a68d6d
parent2ee67f1dad9b2c8e6a097ba1fdd2ea2b0eb69719
This memset() in the ubsec ENGINE is a bug. Zeroing out the result array
should not be necessary in any case, but more importantly the result and
input BIGNUMs could be the same, in which case this is clearly a problem.

Submitted by: Jonathan Hersch
Reviewed by: Joe Orton
Approved by: Geoff Thorpe
engines/e_ubsec.c