Skip to content

Commit ded91c8

Browse files
committed
fix: zeroize DSA private key buffers
1 parent 94060cb commit ded91c8

1 file changed

Lines changed: 6 additions & 2 deletions

File tree

‎src/dsa/clu_dsa.c‎

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -350,10 +350,14 @@ int wolfCLU_DsaParamSetup(int argc, char** argv)
350350
ret = WOLFCLU_FATAL_ERROR;
351351
}
352352

353-
if (pem != NULL)
353+
if (pem != NULL) {
354+
wolfCLU_ForceZero(pem, pemSz);
354355
XFREE(pem, NULL, DYNAMIC_TYPE_TMP_BUFFER);
355-
if (outBuf != NULL)
356+
}
357+
if (outBuf != NULL) {
358+
wolfCLU_ForceZero(outBuf, outBufSz);
356359
XFREE(outBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER);
360+
}
357361
}
358362

359363
wolfSSL_BIO_free(bioIn);

0 commit comments

Comments
 (0)