Use explicit_bzero() instead of memset() on buffers going out of scope.
authorguenther <guenther@openbsd.org>
Mon, 21 Jul 2014 20:19:47 +0000 (20:19 +0000)
committerguenther <guenther@openbsd.org>
Mon, 21 Jul 2014 20:19:47 +0000 (20:19 +0000)
commit5fd8226cf53298fcb9b36bfeadaeefebe64469f0
tree8c8ea1e85aaaad2a93c81b79578d07c73efe6708
parent93bbc9aef64489c62b98ab6e4ddf7ebe33a7385e
Use explicit_bzero() instead of memset() on buffers going out of scope.
Also, zero the SHA256 context.

suggested by "eric" in a comment on an opensslrampage.org post
ok miod@ deraadt@
lib/libcrypto/arc4random/getentropy_linux.c
lib/libcrypto/arc4random/getentropy_osx.c
lib/libcrypto/arc4random/getentropy_solaris.c
lib/libcrypto/crypto/getentropy_linux.c
lib/libcrypto/crypto/getentropy_osx.c
lib/libcrypto/crypto/getentropy_solaris.c