CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2014/01/28 17:21:41
Modified files:
usr.bin/ssh : schnorr.c
Log message:
In the experimental, never-enabled JPAKE code: clear returned digest and
length in hash_buffer() for error cases; could lead to memory corruption
later if EVP_Digest* fails. Pointed out by Mark Dowd
