diff options
| author | jsing <> | 2015-09-13 12:52:07 +0000 |
|---|---|---|
| committer | jsing <> | 2015-09-13 12:52:07 +0000 |
| commit | 2063ab2c02bc341099214d42806f2b9156acfd41 (patch) | |
| tree | f6ea2b92ad7e8b51381771f6255361b62689c691 /src/lib/libc/stdlib/setenv.c | |
| parent | aabba0bcd2c9f46be67b8024dc2ff7cacb7dc930 (diff) | |
| download | openbsd-2063ab2c02bc341099214d42806f2b9156acfd41.tar.gz openbsd-2063ab2c02bc341099214d42806f2b9156acfd41.tar.bz2 openbsd-2063ab2c02bc341099214d42806f2b9156acfd41.zip | |
Stop generating private keys in a network buffer.
The current client key exchange code generates DH and ECDH keys into the
same buffer that we use to send data to the network - stop doing this and
malloc() a new buffer, which we explicit_bzero() and free() on return.
This also benefits from ASLR and means that the keys are no longer
generated in a well known location.
ok beck@
Diffstat (limited to 'src/lib/libc/stdlib/setenv.c')
0 files changed, 0 insertions, 0 deletions