random: zero buffer after reading entropy from userspace
authorJason A. Donenfeld <Jason@zx2c4.com>
Wed, 9 Feb 2022 17:42:13 +0000 (18:42 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 30 May 2022 07:29:06 +0000 (09:29 +0200)
commitd2d1ad9430b1e23aa2f82bca561e85868c519383
tree516b122245c981699d8e3f76eb922d8c74af03e2
parenteda555356b39cab00e9c15aa3258786c568cfb3a
random: zero buffer after reading entropy from userspace

commit 7b5164fb1279bf0251371848e40bae646b59b3a8 upstream.

This buffer may contain entropic data that shouldn't stick around longer
than needed, so zero out the temporary buffer at the end of write_pool().

Reviewed-by: Dominik Brodowski <linux@dominikbrodowski.net>
Reviewed-by: Jann Horn <jannh@google.com>
Reviewed-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/char/random.c