Skip to content

Commit daa7514

Browse files
Wang Mingdavem330
authored andcommitted
net: ipv4: Use kfree_sensitive instead of kfree
key might contain private part of the key, so better use kfree_sensitive to free it. Fixes: 38320c7 ("[IPSEC]: Use crypto_aead and authenc in ESP") Signed-off-by: Wang Ming <machel@vivo.com> Reviewed-by: Tariq Toukan <tariqt@nvidia.com> Reviewed-by: Kuniyuki Iwashima <kuniyu@amazon.com> Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent 7f5acea commit daa7514

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

net/ipv4/esp4.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1132,7 +1132,7 @@ static int esp_init_authenc(struct xfrm_state *x,
11321132
err = crypto_aead_setkey(aead, key, keylen);
11331133

11341134
free_key:
1135-
kfree(key);
1135+
kfree_sensitive(key);
11361136

11371137
error:
11381138
return err;

0 commit comments

Comments
 (0)