A few more memset()s converted to OPENSSL_cleanse().
I *think* I got them all covered by now, bu please, if you find any more,
tell me and I'll correct it.
PR: 343
diff --git a/ssl/s3_srvr.c b/ssl/s3_srvr.c
index c687da9..3db3e78 100644
--- a/ssl/s3_srvr.c
+++ b/ssl/s3_srvr.c
@@ -1717,7 +1717,7 @@
s->method->ssl3_enc->generate_master_secret(s,
s->session->master_key,
p,i);
- memset(p,0,i);
+ OPENSSL_cleanse(p,i);
}
else
#endif
@@ -1780,7 +1780,7 @@
s->session->master_key_length=
s->method->ssl3_enc->generate_master_secret(s,
s->session->master_key,p,i);
- memset(p,0,i);
+ OPENSSL_cleanse(p,i);
}
else
#endif
