]> git.itanic.dy.fi Git - linux-stable/commit
net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree
authorDaniel Borkmann <dborkman@redhat.com>
Fri, 8 Feb 2013 03:04:34 +0000 (03:04 +0000)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 14 Feb 2013 18:49:05 +0000 (10:49 -0800)
commit8a501d87edf7190e8fe1741d9312dfcb6361c538
treeabf0a0ba0fcad5bb747f349517e937cd63c77406
parent4c921d0ed5d49a93613530f4dd405fc2db3ccb84
net: sctp: sctp_setsockopt_auth_key: use kzfree instead of kfree

[ Upstream commit 6ba542a291a5e558603ac51cda9bded347ce7627 ]

In sctp_setsockopt_auth_key, we create a temporary copy of the user
passed shared auth key for the endpoint or association and after
internal setup, we free it right away. Since it's sensitive data, we
should zero out the key before returning the memory back to the
allocator. Thus, use kzfree instead of kfree, just as we do in
sctp_auth_key_put().

Signed-off-by: Daniel Borkmann <dborkman@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/sctp/socket.c