浏览代码

net: sctp: sctp_auth_key_put: use kzfree instead of kfree

For sensitive data like keying material, it is common practice to zero
out keys before returning the memory back to the allocator. Thus, use
kzfree instead of kfree.

Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
Acked-by: Neil Horman <nhorman@tuxdriver.com>
Acked-by: Vlad Yasevich <vyasevich@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Daniel Borkmann 12 年之前
父节点
当前提交
586c31f3bf
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      net/sctp/auth.c

+ 1 - 1
net/sctp/auth.c

@@ -71,7 +71,7 @@ void sctp_auth_key_put(struct sctp_auth_bytes *key)
 		return;
 		return;
 
 
 	if (atomic_dec_and_test(&key->refcnt)) {
 	if (atomic_dec_and_test(&key->refcnt)) {
-		kfree(key);
+		kzfree(key);
 		SCTP_DBG_OBJCNT_DEC(keys);
 		SCTP_DBG_OBJCNT_DEC(keys);
 	}
 	}
 }
 }