From 4f2de66d7be23be3bc4b2976148551509f58ecd9 Mon Sep 17 00:00:00 2001
From: millert <>
Date: Thu, 8 May 2003 23:32:21 +0000
Subject: [PATCH] Clear the digest local var w/ memset() in the End function.

---
 src/lib/libc/hash/rmd160hl.c | 13 +++++++------
 src/lib/libc/hash/sha1hl.c   | 13 +++++++------
 2 files changed, 14 insertions(+), 12 deletions(-)

diff --git a/src/lib/libc/hash/rmd160hl.c b/src/lib/libc/hash/rmd160hl.c
index bf006002..9d61fc6f 100644
--- a/src/lib/libc/hash/rmd160hl.c
+++ b/src/lib/libc/hash/rmd160hl.c
@@ -8,17 +8,17 @@
  */
 
 #if defined(LIBC_SCCS) && !defined(lint)
-static char rcsid[] = "$OpenBSD: rmd160hl.c,v 1.3 2002/12/23 04:33:31 millert Exp $";
+static char rcsid[] = "$OpenBSD: rmd160hl.c,v 1.4 2003/05/08 23:32:21 millert Exp $";
 #endif /* LIBC_SCCS and not lint */
 
-#include <stdlib.h>
-#include <stdio.h>
+#include <sys/types.h>
+
 #include <errno.h>
 #include <fcntl.h>
-#include <sys/types.h>
-#include <sys/uio.h>
-#include <unistd.h>
 #include <rmd160.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <unistd.h>
 
 /* ARGSUSED */
 char *
@@ -37,6 +37,7 @@ RMD160End(RMD160_CTX *ctx, char *buf)
 	buf[i + i + 1] = hex[digest[i] & 0x0f];
     }
     buf[i + i] = '\0';
+    memset(digest, 0, sizeof(digest));
     return(buf);
 }
 
diff --git a/src/lib/libc/hash/sha1hl.c b/src/lib/libc/hash/sha1hl.c
index a8f3a732..5ffaf973 100644
--- a/src/lib/libc/hash/sha1hl.c
+++ b/src/lib/libc/hash/sha1hl.c
@@ -8,17 +8,17 @@
  */
 
 #if defined(LIBC_SCCS) && !defined(lint)
-static char rcsid[] = "$OpenBSD: sha1hl.c,v 1.3 2002/12/23 04:33:31 millert Exp $";
+static const char rcsid[] = "$OpenBSD: sha1hl.c,v 1.4 2003/05/08 23:32:21 millert Exp $";
 #endif /* LIBC_SCCS and not lint */
 
-#include <stdlib.h>
-#include <stdio.h>
+#include <sys/types.h>
+
 #include <errno.h>
 #include <fcntl.h>
-#include <sys/types.h>
-#include <sys/uio.h>
-#include <unistd.h>
 #include <sha1.h>
+#include <stdlib.h>
+#include <stdio.h>
+#include <unistd.h>
 
 /* ARGSUSED */
 char *
@@ -37,6 +37,7 @@ SHA1End(SHA1_CTX *ctx, char *buf)
 	buf[i + i + 1] = hex[digest[i] & 0x0f];
     }
     buf[i + i] = '\0';
+    memset(digest, 0, sizeof(digest));
     return(buf);
 }