On Mon, 30 Mar 2020 17:38:01 +0000, George Spelvin wrote:
> After using get_random_bytes(), you want to wipe the buffer
> afterward so the seed remains secret.
>
> In this case, we can eliminate the temporary buffer entirely.
> fdt_setprop_placeholder() returns a pointer to the property value
> buffer, allowing us to put the random data directly in there without
> using a temporary buffer at all. Faster and less stack all in one.
Applied to arm64 (for-next/misc), thanks!
[1/1] arm64: kexec_file: Avoid temp buffer for RNG seed
https://git.kernel.org/arm64/c/99ee28d99607
Cheers,
--
Will
https://fixes.arm64.dev
https://next.arm64.dev
