Zeroize temporary stack buffer

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2020-06-17 12:40:57 +02:00
parent f1aca9fdba
commit 8745986699

View file

@ -289,10 +289,10 @@ static int ecp_drbg_random( void *p_rng, unsigned char *output, size_t output_le
ecp_drbg_context *ctx = p_rng;
int ret;
size_t len_done = 0;
uint8_t tmp[HASH_BLOCK_BYTES];
while( len_done < output_len )
{
uint8_t tmp[HASH_BLOCK_BYTES];
uint8_t use_len;
/* We don't need to draw more that 255 blocks, so don't bother with
@ -314,6 +314,8 @@ static int ecp_drbg_random( void *p_rng, unsigned char *output, size_t output_le
len_done += use_len;
}
mbedtls_zeroize( tmp, sizeof( tmp ) );
return( 0 );
}