[tor-bugs] #10793 [Tor]: Tor should clear() then free() BigIntegers

Tor Bug Tracker & Wiki blackhole at torproject.org
Sun Feb 2 18:56:59 UTC 2014


#10793: Tor should clear() then free() BigIntegers
-------------------------+---------------------
 Reporter:  nextgens     |          Owner:
     Type:  enhancement  |         Status:  new
 Priority:  normal       |      Milestone:
Component:  Tor          |        Version:
 Keywords:  security     |  Actual Points:
Parent ID:               |         Points:
-------------------------+---------------------
 In order to have decent Forward Secrecy, secrets have to be securely
 disposed of... the patch attached improves the statu quo and makes my
 static analysis tools happier.

 It replaces all occurrences of BN_free() by BN_clear_free(), even where it
 doesn't matter.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10793>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list