commit d103bdb01d125a81a0113b76fe597c1498bc8ad0
author Jerry Yu <jerry.h.yu@arm.com> Thu Dec 02 16:32:13 2021 +0800
committer Jerry Yu <jerry.h.yu@arm.com> Fri Dec 10 10:33:27 2021 +0800
tree 87f323c3473cc3972d3dcfbe7781886df106e77d
parent 745db226dbb3c020e8c76aa3bf2a28d69ded8a7a

Clean randbytes

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>

library/ssl_tls13_generic.c

diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c
index 066147a..fbdf69a 100644
--- a/library/ssl_tls13_generic.c
+++ b/library/ssl_tls13_generic.c
@@ -965,6 +965,9 @@
         goto cleanup;
     }
 
+    /* randbytes is not used again */
+    mbedtls_platform_zeroize( ssl->handshake->randbytes,
+                              sizeof( ssl->handshake->randbytes ) );
     transform_application =
         mbedtls_calloc( 1, sizeof( mbedtls_ssl_transform ) );
     if( transform_application == NULL )