Fix finding 420

padelsbach · padelsbach · commit 0ea5debc3ec5 · 2026-03-06T14:45:42.000-08:00
diff --git a/src/tpm2_wrap.c b/src/tpm2_wrap.c
@@ -3122,6 +3122,10 @@ int wolfTPM2_DecodeRsaDer(const byte* der, word32 derSz,
         wc_FreeRsaKey(key);
     }
 
+    TPM2_ForceZero(d, sizeof(d));
+    TPM2_ForceZero(p, sizeof(p));
+    TPM2_ForceZero(q, sizeof(q));
+
     return rc;
 }
 #endif /* !NO_RSA */

Original file line number	Diff line number	Diff line change
`@@ -3122,6 +3122,10 @@ int wolfTPM2_DecodeRsaDer(const byte* der, word32 derSz,`
`3122`	`3122`	`wc_FreeRsaKey(key);`
`3123`	`3123`	`}`
`3124`	`3124`
	`3125`	`+ TPM2_ForceZero(d, sizeof(d));`
	`3126`	`+ TPM2_ForceZero(p, sizeof(p));`
	`3127`	`+ TPM2_ForceZero(q, sizeof(q));`
	`3128`	`+`
`3125`	`3129`	`return rc;`
`3126`	`3130`	`}`
`3127`	`3131`	`#endif /* !NO_RSA */`