[gnunet] branch master updated: -fix leak in edx25519

[gnunet]

This is an automated email from the git hooks/post-receive script.

oec pushed a commit to branch master
in repository gnunet.

The following commit(s) were added to refs/heads/master by this push:
     new fcc4246bf -fix leak in edx25519
fcc4246bf is described below

commit fcc4246bf03b01df16e69fafe8fba058a0a2e01b
Author: Özgür Kesim <oec-taler@kesim.org>
AuthorDate: Mon Mar 28 12:32:45 2022 +0200

    -fix leak in edx25519
---
 src/util/crypto_edx25519.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/util/crypto_edx25519.c b/src/util/crypto_edx25519.c
index bb5c6d177..49360eeab 100644
--- a/src/util/crypto_edx25519.c
+++ b/src/util/crypto_edx25519.c
@@ -110,6 +110,7 @@ GNUNET_CRYPTO_edx25519_sign_ (
   unsigned char r[64];
   unsigned char hram[64];
   unsigned char P[32];
+  unsigned char r_mod[64];
   unsigned char R[32];
   unsigned char tmp[32];
 
@@ -143,7 +144,6 @@ GNUNET_CRYPTO_edx25519_sign_ (
   /**
    * Reduce the scalar value r
    */
-  unsigned char r_mod[64];
   crypto_core_ed25519_scalar_reduce (r_mod, r);
 
   /**
@@ -255,6 +255,7 @@ derive_h_mod_n (
   GNUNET_assert (! gcry_mpi_cmp_ui (h_mod_n, 1));
 #endif
 
+  gcry_mpi_release(h);
   return h_mod_n;
 }
 
@@ -330,6 +331,7 @@ GNUNET_CRYPTO_edx25519_private_key_derive (
 #endif
 
   gcry_mpi_release (h_mod_n);
+  gcry_mpi_release (eight);
   gcry_mpi_release (h);
   gcry_mpi_release (x);
   gcry_mpi_release (n);

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.