yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-12-23 00:35:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

pkcs11: zeroize buffer earlier on failure

Browse source 
Change the buffer zeroization so that it happens earlier
This commit is contained in:
Andrzej Kurek 2018-03-20 05:02:29 -04:00
parent 686a05e90c
commit b23b04d177
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
library/pkcs11_client.c
View file

@ -157,6 +157,8 @@ static int pkcs11_sign_core( mbedtls_pk_pkcs11_context_t *ctx,
goto exit;
*sig_len = ck_sig_len;
exit:
if( rv != CKR_OK )
memset( sig, 0, ck_sig_len );
return( pkcs11_err_to_mbedtls_pk_err( rv ) );
}
#endif /* MBEDTLS_RSA_C */
@ -226,8 +228,6 @@ static int pkcs11_sign( void *ctx_arg,
return( MBEDTLS_ERR_PK_UNKNOWN_PK_ALG );
}
if( ret != 0 )
memset( sig, 0, *sig_len );
return( ret );
}