Use freezero() for the internal opaque structures, instead of the current

explicit_bzero()/free(). Less code and potentially less overhead.

1 files changed, 3 insertions, 6 deletions

diff --git a/src/lib/libssl/ssl_sess.c b/src/lib/libssl/ssl_sess.c
index 5d80e58196..59d7d9ec24 100644
--- a/src/lib/libssl/ssl_sess.c
+++ b/src/lib/libssl/ssl_sess.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sess.c,v 1.70 2017/02/07 02:08:38 beck Exp $ */
+/* $OpenBSD: ssl_sess.c,v 1.71 2017/04/10 17:27:33 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -705,11 +705,8 @@ SSL_SESSION_free(SSL_SESSION *ss)
         free(ss->internal->tlsext_ecpointformatlist);
         free(ss->internal->tlsext_supportedgroups);
 
-        explicit_bzero(ss->internal, sizeof(*ss->internal));
-        free(ss->internal);
-
-        explicit_bzero(ss, sizeof(*ss));
-        free(ss);
+        freezero(ss->internal, sizeof(*ss->internal));
+        freezero(ss, sizeof(*ss));
 }
 
 int