From e881246f1e12310587271f6c32e1e16438333b2c Mon Sep 17 00:00:00 2001
From: tedu <>
Date: Sun, 15 Jun 2014 22:53:21 +0000
Subject: free iv, then cleanse. from Cyril Jouve

---
 src/lib/libcrypto/evp/e_aes.c         | 4 ++--
 src/lib/libssl/src/crypto/evp/e_aes.c | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/lib/libcrypto/evp/e_aes.c b/src/lib/libcrypto/evp/e_aes.c
index 8ee93c4bbd..f40bcf8bd3 100644
--- a/src/lib/libcrypto/evp/e_aes.c
+++ b/src/lib/libcrypto/evp/e_aes.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: e_aes.c,v 1.21 2014/06/15 15:41:25 jsing Exp $ */
+/* $OpenBSD: e_aes.c,v 1.22 2014/06/15 22:53:21 tedu Exp $ */
 /* ====================================================================
  * Copyright (c) 2001-2011 The OpenSSL Project.  All rights reserved.
  *
@@ -651,9 +651,9 @@ aes_gcm_cleanup(EVP_CIPHER_CTX *c)
 {
 	EVP_AES_GCM_CTX *gctx = c->cipher_data;
 
-	OPENSSL_cleanse(gctx, sizeof(*gctx));
 	if (gctx->iv != c->iv)
 		free(gctx->iv);
+	OPENSSL_cleanse(gctx, sizeof(*gctx));
 	return 1;
 }
 
diff --git a/src/lib/libssl/src/crypto/evp/e_aes.c b/src/lib/libssl/src/crypto/evp/e_aes.c
index 8ee93c4bbd..f40bcf8bd3 100644
--- a/src/lib/libssl/src/crypto/evp/e_aes.c
+++ b/src/lib/libssl/src/crypto/evp/e_aes.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: e_aes.c,v 1.21 2014/06/15 15:41:25 jsing Exp $ */
+/* $OpenBSD: e_aes.c,v 1.22 2014/06/15 22:53:21 tedu Exp $ */
 /* ====================================================================
  * Copyright (c) 2001-2011 The OpenSSL Project.  All rights reserved.
  *
@@ -651,9 +651,9 @@ aes_gcm_cleanup(EVP_CIPHER_CTX *c)
 {
 	EVP_AES_GCM_CTX *gctx = c->cipher_data;
 
-	OPENSSL_cleanse(gctx, sizeof(*gctx));
 	if (gctx->iv != c->iv)
 		free(gctx->iv);
+	OPENSSL_cleanse(gctx, sizeof(*gctx));
 	return 1;
 }
 
-- 
cgit v1.2.3-55-g6feb