tree 997e2dc37f412632871a99c8c5ae82178aa14a04
parent 08d774a45f4014028c31ba8ed19a3d9ec79f5f92
author David Benjamin <davidben@google.com> 1516813856 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1517875023 +0000

Don't leak widths in bn_mod_mul_montgomery_fallback.

The fallback functions still themselves leak, but I've left TODOs there.

This only affects BN_mod_mul_montgomery on platforms where we don't use
the bn_mul_mont assembly, but BN_mul additionally affects the final
multiplication in RSA CRT.

Bug: 232
Change-Id: Ia1ae16162c38e10c056b76d6b2afbed67f1a5e16
Reviewed-on: https://boringssl-review.googlesource.com/25260
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Adam Langley <agl@google.com>