[PATCH v2 5/8] crypto/qat: use secure memset

Stephen Hemminger stephen at networkplumber.org
Thu Nov 14 02:52:19 CET 2024


Regular memset maybe removed by compiler if done before a free
function. Use new rte_free_sensative instead.

Signed-off-by: Stephen Hemminger <stephen at networkplumber.org>
---
 drivers/crypto/qat/qat_asym.c | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/drivers/crypto/qat/qat_asym.c b/drivers/crypto/qat/qat_asym.c
index f5b56b2f71..336e7ec0e5 100644
--- a/drivers/crypto/qat/qat_asym.c
+++ b/drivers/crypto/qat/qat_asym.c
@@ -102,10 +102,7 @@ static const struct rte_driver cryptodev_qat_asym_driver = {
 		curve.p.data, curve.bytesize)
 
 #define PARAM_CLR(what) \
-	do { \
-		memset(what.data, 0, what.length); \
-		rte_free(what.data);	\
-	} while (0)
+	rte_free_sensative(what.data)
 
 static void
 request_init(struct icp_qat_fw_pke_request *qat_req)
-- 
2.45.2



More information about the dev mailing list