On Tue, 2020-04-14 at 15:37 -0400, Waiman Long wrote:> OK, I can change it to clear the key length when the allocation failed> which isn't likely.Perhaps: kfree_sensitive(op->key); op->key = NULL; op->keylen = 0;but I don't know that it impacts any possible state.