Argon2: explicitly initialize ctx.secret to NULL

2016-01-26 11:14:40 +01:00 · 2016-01-26 11:14:40 +01:00 · bd15b68569
commit bd15b68569
parent 367afac0bf
1 changed files with 3 additions and 0 deletions
--- a/src/libsodium/crypto_pwhash/argon2/argon2.c
+++ b/src/libsodium/crypto_pwhash/argon2/argon2.c
@ -182,6 +182,9 @@ int argon2_verify(const char *encoded, const void *pwd, const size_t pwdlen,

    memset(&ctx, 0, sizeof ctx);

+    ctx.secret = NULL;
+    ctx.secretlen = 0;
+
    /* max values, to be updated in decode_string */
    encoded_len = strlen(encoded);
    ctx.adlen = encoded_len;