zero out memory on init

aws · Dec 29, 2023 · b60dba4 · b60dba4
1 parent 3be189d
commit b60dba4
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/crypto/fipsmodule/cipher/e_aesccm.c b/crypto/fipsmodule/cipher/e_aesccm.c
@@ -623,6 +623,7 @@ static int cipher_aes_ccm_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
   CIPHER_AES_CCM_CTX *cipher_ctx = CCM_CTX(ctx);
   switch (type) {
     case EVP_CTRL_INIT:
+      OPENSSL_memset(cipher_ctx, 0, sizeof(CIPHER_AES_CCM_CTX));
       cipher_ctx->key_set = 0;
       cipher_ctx->iv_set = 0;
       cipher_ctx->tag_set = 0;