commit ea0fad432766d1e923964d269f528cd8fb760e02
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Fri Jun 23 16:23:21 2017 +0100
committer Andres Amaya Garcia <andres.amayagarcia@arm.com> Tue Jul 11 17:19:25 2017 +0100
tree 4901fd983914457fbf369a55aa2ddca01fc4232b
parent fbb9837ad56e327f22c6b155e7b2fce796723e33

Zeroize tmp buf on fail in load_file() dhm.c

library/dhm.c

diff --git a/library/dhm.c b/library/dhm.c
index 0f4d316..d895eec 100644
--- a/library/dhm.c
+++ b/library/dhm.c
@@ -539,7 +539,10 @@
     if( fread( *buf, 1, *n, f ) != *n )
     {
         fclose( f );
+
+        mbedtls_zeroize( *buf, *n + 1 );
         mbedtls_free( *buf );
+
         return( MBEDTLS_ERR_DHM_FILE_IO_ERROR );
     }