From 8bea6e7211234af80b7a52972d3c14596a38c767 Mon Sep 17 00:00:00 2001
From: jsing <>
Date: Mon, 10 Apr 2017 17:27:33 +0000
Subject: Use freezero() for the internal opaque structures, instead of the
 current explicit_bzero()/free(). Less code and potentially less overhead.

---
 src/lib/libssl/ssl_sess.c | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

(limited to 'src/lib/libssl/ssl_sess.c')

diff --git a/src/lib/libssl/ssl_sess.c b/src/lib/libssl/ssl_sess.c
index 5d80e58196..59d7d9ec24 100644
--- a/src/lib/libssl/ssl_sess.c
+++ b/src/lib/libssl/ssl_sess.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sess.c,v 1.70 2017/02/07 02:08:38 beck Exp $ */
+/* $OpenBSD: ssl_sess.c,v 1.71 2017/04/10 17:27:33 jsing Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -705,11 +705,8 @@ SSL_SESSION_free(SSL_SESSION *ss)
 	free(ss->internal->tlsext_ecpointformatlist);
 	free(ss->internal->tlsext_supportedgroups);
 
-	explicit_bzero(ss->internal, sizeof(*ss->internal));
-	free(ss->internal);
-
-	explicit_bzero(ss, sizeof(*ss));
-	free(ss);
+	freezero(ss->internal, sizeof(*ss->internal));
+	freezero(ss, sizeof(*ss));
 }
 
 int
-- 
cgit v1.2.3-55-g6feb