Differential D25442

Use zfree() to explicitly zero IPsec keys.
ClosedPublic
Actions

Authored by jhb on Jun 25 2020, 12:42 AM.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Apr 1, 1:07 PM

	Unknown Object (File)
	Sun, Mar 29, 2:46 PM

	Unknown Object (File)
	Thu, Mar 26, 7:05 PM

	Unknown Object (File)
	Mar 6 2026, 2:55 AM

	Unknown Object (File)
	Mar 3 2026, 4:40 AM

	Unknown Object (File)
	Mar 2 2026, 7:55 PM

	Unknown Object (File)
	Mar 2 2026, 6:57 PM

	Unknown Object (File)
	Mar 2 2026, 2:19 AM

Subscribers

Details

Reviewers

delphij
cem

Commits

rS362632: Use zfree() to explicitly zero IPsec keys.

Test Plan

tested with IPsec tunnels over IPv4 (AES-CBC + SHA1 and AES-GCM) and IPv6 (AES-GCM) and using setkey -F to clear state after

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 31945
Build 29496: arc lint + arc unit

Event Timeline

jhb created this revision.Jun 25 2020, 12:42 AM

Herald added subscribers: melifaro, ae. · View Herald TranscriptJun 25 2020, 12:42 AM

jhb requested review of this revision.Jun 25 2020, 12:42 AM

Harbormaster completed remote builds in B31945: Diff 73614.Jun 25 2020, 12:42 AM

jhb added a child revision: D25443: Simplify IPsec transform-specific teardown..Jun 25 2020, 12:43 AM

No interest in ipsec.

I think setting tdb_xform to NULL is no longer needed (as they are about to be done by the caller anyway).

sys/netipsec/xform_ah.c
256	Looks like this is redundant too? (Already done by caller, key_cleansav).
sys/netipsec/xform_esp.c
250	Looks like this is redundant too? (Already done by caller, key_cleansav).
sys/netipsec/xform_tcp.c
368	Looks like this is redundant too? (Already done by caller, key_cleansav).

This revision is now accepted and ready to land.Jun 25 2020, 4:36 AM

In D25442#561674, @delphij wrote:

I think setting tdb_xform to NULL is no longer needed (as they are about to be done by the caller anyway).

Yes, I removed those in the followup change. Here I was trying to just focus on the key zeroing via zfree separate from the other change.

Closed by commit rS362632: Use zfree() to explicitly zero IPsec keys. (authored by jhb). · Explain WhyJun 25 2020, 8:31 PM

This revision was automatically updated to reflect the committed changes.

jhb added a commit: rS362632: Use zfree() to explicitly zero IPsec keys..

Herald added a subscriber: imp. · View Herald TranscriptJun 25 2020, 8:31 PM

Revision Contents
Changeset List

Path

Size

sys/

netipsec/

14 lines

3 lines

4 lines

2 lines

Diff 73614

sys/netipsec/key.c

Loading...

sys/netipsec/xform_ah.c

Loading...

sys/netipsec/xform_esp.c

Loading...

sys/netipsec/xform_tcp.c

Loading...