commit fd320e9a6e521650aab86126da9627aec55e4db0
author Jerry Yu <jerry.h.yu@arm.com> Fri Oct 08 21:52:41 2021 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Fri Oct 08 21:52:41 2021 +0800
tree eb43d88af488cfdcf70387e629337b66e8e6432f
parent 88b756bacb410918b91897bdcd96973be54e6198

Replace zeroize with memset

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_msg.c

diff --git a/library/ssl_msg.c b/library/ssl_msg.c
index 7fa0a56..fdb647a 100644
--- a/library/ssl_msg.c
+++ b/library/ssl_msg.c
@@ -4796,7 +4796,7 @@
     }
     else
 #endif /* MBEDTLS_SSL_PROTO_DTLS */
-    mbedtls_platform_zeroize( ssl->in_ctr, MBEDTLS_SSL_SEQUENCE_NUMBER_LEN );
+    memset( ssl->in_ctr, 0, MBEDTLS_SSL_SEQUENCE_NUMBER_LEN );
 
     mbedtls_ssl_update_in_pointers( ssl );
 
@@ -5562,14 +5562,14 @@
                                         mbedtls_ssl_transform *transform )
 {
     ssl->transform_in = transform;
-    mbedtls_platform_zeroize( ssl->in_ctr, MBEDTLS_SSL_SEQUENCE_NUMBER_LEN );
+    memset( ssl->in_ctr, 0, MBEDTLS_SSL_SEQUENCE_NUMBER_LEN );
 }
 
 void mbedtls_ssl_set_outbound_transform( mbedtls_ssl_context *ssl,
                                          mbedtls_ssl_transform *transform )
 {
     ssl->transform_out = transform;
-    mbedtls_platform_zeroize( ssl->cur_out_ctr, sizeof( ssl->cur_out_ctr ) );
+    memset( ssl->cur_out_ctr, 0, sizeof( ssl->cur_out_ctr ) );
 }
 
 #if defined(MBEDTLS_SSL_PROTO_DTLS)

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index 8c1fdd8..bf3ab09 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -2824,8 +2824,7 @@
                 sizeof( ssl->handshake->alt_out_ctr ) );
 
         /* Set sequence_number to zero */
-        mbedtls_platform_zeroize( &ssl->cur_out_ctr[2],
-                                  sizeof( ssl->cur_out_ctr ) - 2 );
+        memset( &ssl->cur_out_ctr[2], 0, sizeof( ssl->cur_out_ctr ) - 2 );
 
 
         /* Increment epoch */
@@ -2842,7 +2841,7 @@
     }
     else
 #endif /* MBEDTLS_SSL_PROTO_DTLS */
-    mbedtls_platform_zeroize( ssl->cur_out_ctr, sizeof( ssl->cur_out_ctr ) );
+    memset( ssl->cur_out_ctr, 0, sizeof( ssl->cur_out_ctr ) );
 
     ssl->transform_out = ssl->transform_negotiate;
     ssl->session_out = ssl->session_negotiate;
@@ -3327,7 +3326,7 @@
     ssl->out_msglen  = 0;
     ssl->out_left    = 0;
     memset( ssl->out_buf, 0, out_buf_len );
-    mbedtls_platform_zeroize( ssl->cur_out_ctr, sizeof( ssl->cur_out_ctr ) );
+    memset( ssl->cur_out_ctr, 0, sizeof( ssl->cur_out_ctr ) );
     ssl->transform_out = NULL;
 
 #if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)