)]}'
{"id":"openvpn~2075","triplet_id":"openvpn~master~I4d35f54402460c5866aeba26216ac1b2d2f8ebdc","project":"openvpn","branch":"master","full_branch":"refs/heads/master","attention_set":{},"removed_from_attention_set":{"1000062":{"account":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"last_update":"2026-11-05 16:50:40.000000000","reason":"Change was submitted"},"1000003":{"account":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"last_update":"2026-11-05 16:50:40.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I4d35f54402460c5866aeba26216ac1b2d2f8ebdc","subject":"ssl: Wipe the key source material in key_state_free()","status":"MERGED","created":"2026-11-01 01:32:12.000000000","updated":"2026-11-05 16:50:40.000000000","submitted":"2026-11-05 16:50:40.000000000","submitter":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"2075","meta_rev_id":"9f97c0dc7538ee66e12f1fca3101d301720226c3","_number":2075,"virtual_id_number":2075,"owner":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"actions":{},"labels":{"Code-Review":{"all":[{"value":0,"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},{"value":0,"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"}],"values":{"-2":"This shall not be submitted","-1":"I would prefer this is not submitted as is"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me, approved"},"description":"","default_value":0}},"removable_reviewers":[{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"}],"reviewers":{"REVIEWER":[{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."}],"CC":[{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-11-01 01:32:13.000000000","updated_by":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"real_updated_by":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"reviewer":{"_account_id":1000026,"name":"openvpn-devel","email":"openvpn-devel@lists.sourceforge.net","username":"openvpn-devel"},"state":"CC"},{"updated":"2026-11-01 01:32:13.000000000","updated_by":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"real_updated_by":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"reviewer":{"_account_id":1000003,"name":"Arne Schwabe","display_name":"Arne Schwabe","email":"arne-openvpn@rfc2549.org","username":"plaisthos"},"state":"REVIEWER"},{"updated":"2026-11-05 08:44:08.000000000","updated_by":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"real_updated_by":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"reviewer":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"state":"REVIEWER"}],"messages":[{"id":"9d177cef98cbe5c063380e2c2158d1c386bf4063","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"date":"2026-11-01 01:32:12.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"da3867f7eb766891f96bfb5f59383d1f51752a84","author":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"date":"2026-11-05 08:44:08.000000000","message":"Patch Set 1: Code-Review+2","accounts_in_message":[],"_revision_number":1},{"id":"9f97c0dc7538ee66e12f1fca3101d301720226c3","tag":"autogenerated:gerrit:merged","author":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"date":"2026-11-05 16:50:40.000000000","message":"Change has been successfully pushed.","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"da6659452a34b5c94b20f55cbeb96b9ba70885ad","revisions":{"a5ec84fdb69a6b63ebab56b260bbe231dfeca50e":{"kind":"REWORK","_number":1,"created":"2026-11-01 01:32:12.000000000","uploader":{"_account_id":1000062,"name":"Hansaem Wi","email":"hansaemw@gmail.com","username":"wihansaem1991"},"ref":"refs/changes/75/2075/1","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/75/2075/1","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1 \u0026\u0026 git checkout -b change-2075 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/1 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"3e2d92c7f7e53f329795c865cb36d1fc788e9a9a","subject":"multi: release the session-id hash reference on shutdown"}],"author":{"name":"Hansaem Wi","email":"hansaemw@gmail.com","date":"2026-11-01 01:26:48.000000000","tz":540},"committer":{"name":"Hansaem Wi","email":"hansaemw@gmail.com","date":"2026-11-01 01:27:00.000000000","tz":540},"subject":"ssl: Wipe the key source material in key_state_free()","message":"ssl: Wipe the key source material in key_state_free()\n\nks-\u003ekey_src holds the pre_master and random values that the peers\nexchange in key method 2. It is wiped after the data channel keys have\nbeen generated and on the error paths of key_method_2_read() and\nkey_method_2_write(). When a key state is freed before the keys are\ngenerated, for example because an --auth-user-pass-verify script or a\nclient-connect script rejects the client, key_state_free() frees it\nwith plain free() and the key material stays in freed memory, on the\nserver and on the client.\n\nWipe it with secure_memzero() before freeing it.\n\nAssisted-by: Claude Code:claude-opus-5-5\nChange-Id: I4d35f54402460c5866aeba26216ac1b2d2f8ebdc\nSigned-off-by: Hansaem Wi \u003chansaemw@gmail.com\u003e\n"},"branch":"refs/heads/master"},"da6659452a34b5c94b20f55cbeb96b9ba70885ad":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":2,"created":"2026-11-05 16:50:40.000000000","uploader":{"_account_id":1000002,"name":"Gert Doering","display_name":"Gert Doering","email":"gert@greenie.muc.de","username":"cron2"},"ref":"refs/changes/75/2075/2","fetch":{"anonymous http":{"url":"https://gerrit.openvpn.net/openvpn","ref":"refs/changes/75/2075/2","commands":{"Branch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2 \u0026\u0026 git checkout -b change-2075 FETCH_HEAD","Checkout":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2","Reset To":"git fetch https://gerrit.openvpn.net/openvpn refs/changes/75/2075/2 \u0026\u0026 git reset --hard FETCH_HEAD"}}},"commit":{"parents":[{"commit":"120a213b00db82090c0d03f1735a12d381b7ddab","subject":"plugin: resolve plugin dependencies from the plugin directory"}],"author":{"name":"Hansaem Wi","email":"hansaemw@gmail.com","date":"2026-11-05 09:37:12.000000000","tz":60},"committer":{"name":"Gert Doering","email":"gert@greenie.muc.de","date":"2026-11-05 16:41:55.000000000","tz":60},"subject":"ssl: Wipe the key source material in key_state_free()","message":"ssl: Wipe the key source material in key_state_free()\n\nks-\u003ekey_src holds the pre_master and random values that the peers\nexchange in key method 2. It is wiped after the data channel keys have\nbeen generated and on the error paths of key_method_2_read() and\nkey_method_2_write(). When a key state is freed before the keys are\ngenerated, for example because an --auth-user-pass-verify script or a\nclient-connect script rejects the client, key_state_free() frees it\nwith plain free() and the key material stays in freed memory, on the\nserver and on the client.\n\nWipe it with secure_memzero() before freeing it.\n\nAssisted-by: Claude Code:claude-opus-5-5\nChange-Id: I4d35f54402460c5866aeba26216ac1b2d2f8ebdc\nSigned-off-by: Hansaem Wi \u003chansaemw@gmail.com\u003e\nAcked-by: Steffan Karger \u003csteffan@karger.me\u003e\nGerrit URL: https://gerrit.openvpn.net/c/openvpn/+/2075\nMessage-Id: \u003c20261105093720.11781-1-gert@greenie.muc.de\u003e\nURL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg40746.html\nSigned-off-by: Gert Doering \u003cgert@greenie.muc.de\u003e\n"},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[]}