Skip to content

Commit dfd37f4

Browse files
committed
Zeroize EC DER buffer in PEM write error path
F-2141 The error path in wolfSSL_PEM_write_mem_ECPrivateKey freed the EC private key DER staging buffer without ForceZero. Zeroize before free.
1 parent a05dd20 commit dfd37f4

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/pk_ec.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4095,6 +4095,7 @@ int wolfSSL_PEM_write_mem_ECPrivateKey(WOLFSSL_EC_KEY* ec,
40954095
derSz = wc_EccKeyToDer((ecc_key*)ec->internal, derBuf, der_max_len);
40964096
if (derSz < 0) {
40974097
WOLFSSL_MSG("wc_EccKeyToDer failed");
4098+
ForceZero(derBuf, der_max_len);
40984099
XFREE(derBuf, NULL, DYNAMIC_TYPE_DER);
40994100
ret = 0;
41004101
}

0 commit comments

Comments
 (0)