commit eb132b655c86607237d23b249edde6150029d27f
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Fri Jun 23 16:30:31 2017 +0100
committer Andres Amaya Garcia <andres.amayagarcia@arm.com> Fri Jun 23 16:30:31 2017 +0100
tree aa9527c72cbffb332c8d70cfff6c783348df3cee
parent bdbca7b383b72f65f9a2bf2671e1f76f9f789703

Zeroize tmp buf in mbedtls_md_file() md.c

library/md.c

diff --git a/library/md.c b/library/md.c
index eda98f6..75b9717 100644
--- a/library/md.c
+++ b/library/md.c
@@ -312,12 +312,11 @@
         md_info->update_func( ctx.md_ctx, buf, n );
 
     if( ferror( f ) != 0 )
-    {
         ret = MBEDTLS_ERR_MD_FILE_IO_ERROR;
-        goto cleanup;
-    }
+    else
+        md_info->finish_func( ctx.md_ctx, output );
 
-    md_info->finish_func( ctx.md_ctx, output );
+    mbedtls_zeroize( buf, sizeof( buf ) );
 
 cleanup:
     fclose( f );