memset the right length of the {i,o}pad data, memset opad not ipad in the opad case...

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>

diff --git a/lib/hcrypto/hmac.c b/lib/hcrypto/hmac.c
index dcd836d0be3b9c861089c6ca311dfd0b12fbdcb1..d11bd9876988332142290dd3dabcc45ac4bea57c 100644 (file)
--- a/lib/hcrypto/hmac.c
+++ b/lib/hcrypto/hmac.c
@@ -52,12 +52,12 @@ HMAC_CTX_cleanup(HMAC_CTX *ctx)
        ctx->buf = NULL;
     }
     if (ctx->opad) {
-       memset(ctx->ipad, 0, ctx->key_length);
+       memset(ctx->opad, 0, EVP_MD_block_size(ctx->md));
        free(ctx->opad);
        ctx->opad = NULL;
     }
     if (ctx->ipad) {
-       memset(ctx->ipad, 0, ctx->key_length);
+       memset(ctx->ipad, 0, EVP_MD_block_size(ctx->md));
        free(ctx->ipad);
        ctx->ipad = NULL;
     }