commit f148312db4580e835996ebf8ad60dfd1092a67d5
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Wed Jul 12 10:21:30 2017 +0100
committer Andres Amaya Garcia <andres.amayagarcia@arm.com> Wed Jul 12 10:21:30 2017 +0100
tree d394af0d9691cd6a3a52037d5caf0a942098d36d
parent 8a2855ee3cf2fb3443e12233fcbbea4a9492b683

Zeroize tmp buf on fail in load_file() dhm.c

library/dhm.c

diff --git a/library/dhm.c b/library/dhm.c
index 0a4f820..6109e0a 100644
--- a/library/dhm.c
+++ b/library/dhm.c
@@ -532,7 +532,10 @@
     if( fread( *buf, 1, *n, f ) != *n )
     {
         fclose( f );
+
+        polarssl_zeroize( *buf, *n + 1 );
         polarssl_free( *buf );
+
         return( POLARSSL_ERR_DHM_FILE_IO_ERROR );
     }