linuxkm/module_hooks.c: in IntelRDseed64_r(), burn buf after each use to protect against info leakage.

This commit is contained in:
Daniel Pouzzner
2025-08-25 21:59:32 -05:00
parent 7aab2f3b47
commit fa61187f2e

View File

@@ -323,6 +323,7 @@ static WC_INLINE int IntelRDseed64_r(word64* rnd)
WC_SANITIZE_DISABLE();
*rnd ^= buf; /* deliberately retain any garbage passed in the dest buffer. */
WC_SANITIZE_ENABLE();
buf = 0;
}
return 0;
}