Replace memset(address,0,bytes) which may be optimised away with memzero_explicit(address,bytes) which resists such optimisation --- crypto/des_generic.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/crypto/des_generic.c b/crypto/des_generic.c index c85354a5e94c..105a32e7afea 100644 --- a/crypto/des_generic.c +++ b/crypto/des_generic.c @@ -30,7 +30,7 @@ static int des_setkey(struct crypto_tfm *tfm, const u8 *key, err = 0; } if (err) - memset(dctx, 0, sizeof(*dctx)); + memzero_explicit(dctx, sizeof(*dctx)); return err; } @@ -62,7 +62,7 @@ static int des3_ede_setkey(struct crypto_tfm *tfm, const u8 *key, err = 0; } if (err) - memset(dctx, 0, sizeof(*dctx)); + memzero_explicit(dctx, sizeof(*dctx)); return err; } --