Skip to content
This repository was archived by the owner on Jan 26, 2026. It is now read-only.

Commit d15fa16

Browse files
committed
SSH-01-012: Fix information leak via uninitialized stack buffer
Fixes T190 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Jakub Jelen <jjelen@redhat.com> (cherry picked from commit 9d67ca2)
1 parent a91e5f7 commit d15fa16

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

src/pki_container_openssh.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -108,8 +108,8 @@ static int pki_private_key_decrypt(ssh_string blob,
108108
{
109109
struct ssh_cipher_struct *ciphers = ssh_get_ciphertab();
110110
struct ssh_cipher_struct cipher;
111-
uint8_t key_material[128];
112-
char passphrase_buffer[128];
111+
uint8_t key_material[128] = {0};
112+
char passphrase_buffer[128] = {0};
113113
size_t key_material_len;
114114
ssh_buffer buffer;
115115
ssh_string salt;

0 commit comments

Comments
 (0)