These seem like they were definitely meant to be explicit zeroings.

Index: pfkey.c
===================================================================
RCS file: /cvs/src/usr.sbin/bgpd/pfkey.c,v
retrieving revision 1.44
diff -u -p -r1.44 pfkey.c
--- pfkey.c     10 Feb 2015 05:18:39 -0000      1.44
+++ pfkey.c     10 Sep 2015 18:35:12 -0000
@@ -464,14 +464,14 @@ pfkey_reply(int sd, u_int32_t *spip)
        len = hdr.sadb_msg_len * PFKEY2_CHUNK;
        if (read(sd, data, len) != len) {
                log_warn("pfkey read");
-               bzero(data, len);
+               explicit_bzero(data, len);
                free(data);
                return (-1);
        }
 
        if (hdr.sadb_msg_type == SADB_GETSPI) {
                if (spip == NULL) {
-                       bzero(data, len);
+                       explicit_bzero(data, len);
                        free(data);
                        return (0);
                }
@@ -489,7 +489,7 @@ pfkey_reply(int sd, u_int32_t *spip)
                        }
                }
        }
-       bzero(data, len);
+       explicit_bzero(data, len);
        free(data);
        return (0);
 }

Reply via email to