commit 9ef95ddcaf41b2c66bc3c1efc1d71b2fe568e01a
author Damien Miller <djm@mindrot.org> Tue Jan 22 23:10:33 2002 +1100
committer Damien Miller <djm@mindrot.org> Tue Jan 22 23:10:33 2002 +1100
tree b7621a6d83f94b1b4a46d8eddacd5066ecaa5d64
parent 040b64f60a4bbcc0da4521847e0526132b3aaac1

   - markus@cvs.openbsd.org 2001/12/27 19:37:23
     [dh.c kexdh.c kexgex.c]
     always use BN_clear_free instead of BN_free

kexgex.c

diff --git a/kexgex.c b/kexgex.c
index b4fdac6..8822c8d 100644
--- a/kexgex.c
+++ b/kexgex.c
@@ -24,7 +24,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: kexgex.c,v 1.11 2001/12/27 18:22:16 markus Exp $");
+RCSID("$OpenBSD: kexgex.c,v 1.12 2001/12/27 19:37:23 markus Exp $");
 
 #include <openssl/bn.h>
 
@@ -232,7 +232,7 @@
 	/* have keys, free DH */
 	DH_free(dh);
 	xfree(server_host_key_blob);
-	BN_free(dh_server_pub);
+	BN_clear_free(dh_server_pub);
 
 	if (key_verify(server_host_key, signature, slen, hash, 20) != 1)
 		fatal("key_verify failed for server_host_key");
@@ -365,7 +365,7 @@
 	    dh->pub_key,
 	    shared_secret
 	);
-	BN_free(dh_client_pub);
+	BN_clear_free(dh_client_pub);
 
 	/* save session id := H */
 	/* XXX hashlen depends on KEX */