net/tls: make sure offload also gets the keys wiped
authorJakub Kicinski <jakub.kicinski@netronome.com>
Fri, 28 Jun 2019 23:11:39 +0000 (16:11 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 28 Jul 2019 06:29:27 +0000 (08:29 +0200)
commitfde351aeff4afe74c430395be01dd83c070ab85c
tree06f6d80994e5181057245e79548fc6a7ca3c3a29
parentd9571a9f5ec19820571de3c2244d16f5b53b8bf0
net/tls: make sure offload also gets the keys wiped

[ Upstream commit acd3e96d53a24d219f720ed4012b62723ae05da1 ]

Commit 86029d10af18 ("tls: zero the crypto information from tls_context
before freeing") added memzero_explicit() calls to clear the key material
before freeing struct tls_context, but it missed tls_device.c has its
own way of freeing this structure. Replace the missing free.

Fixes: 86029d10af18 ("tls: zero the crypto information from tls_context before freeing")
Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/net/tls.h
net/tls/tls_device.c
net/tls/tls_main.c