Skip to content

Commit f28fd37

Browse files
committed
ForceZero mac buffer in ExpectedResumptionSecret before return F-1465
1 parent 96b4e01 commit f28fd37

1 file changed

Lines changed: 1 addition & 8 deletions

File tree

src/tls13.c

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12323,39 +12323,32 @@ static int ExpectedResumptionSecret(WOLFSSL* ssl)
1232312323
wc_Sha256Free(&ssl->hsHashes->hashSha256);
1232412324
ret = wc_Sha256Copy(&digest.sha256, &ssl->hsHashes->hashSha256);
1232512325
wc_Sha256Free(&digest.sha256);
12326-
if (ret != 0)
12327-
return ret;
1232812326
break;
1232912327
#endif
1233012328
#ifdef WOLFSSL_SHA384
1233112329
case sha384_mac:
1233212330
wc_Sha384Free(&ssl->hsHashes->hashSha384);
1233312331
ret = wc_Sha384Copy(&digest.sha384, &ssl->hsHashes->hashSha384);
1233412332
wc_Sha384Free(&digest.sha384);
12335-
if (ret != 0)
12336-
return ret;
1233712333
break;
1233812334
#endif
1233912335
#ifdef WOLFSSL_TLS13_SHA512
1234012336
case sha512_mac:
1234112337
wc_Sha512Free(&ssl->hsHashes->hashSha512);
1234212338
ret = wc_Sha512Copy(&digest.sha512, &ssl->hsHashes->hashSha512);
1234312339
wc_Sha512Free(&digest.sha512);
12344-
if (ret != 0)
12345-
return ret;
1234612340
break;
1234712341
#endif
1234812342
#ifdef WOLFSSL_SM3
1234912343
case sm3_mac:
1235012344
wc_Sm3Free(&ssl->hsHashes->hashSm3);
1235112345
ret = wc_Sm3Copy(&digest.sm3, &ssl->hsHashes->hashSm3);
1235212346
wc_Sm3Free(&digest.sm3);
12353-
if (ret != 0)
12354-
return ret;
1235512347
break;
1235612348
#endif
1235712349
}
1235812350

12351+
ForceZero(mac, sizeof(mac));
1235912352
return ret;
1236012353
}
1236112354
#endif

0 commit comments

Comments
 (0)