Skip to content

Commit b5f66e9

Browse files
committed
Fix Fenrir F-1764: wolfTPM2_EncryptDecryptBlock output cleanup
1 parent 44fcd9f commit b5f66e9

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

src/tpm2_wrap.c

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5990,6 +5990,8 @@ int wolfTPM2_EncryptDecryptBlock(WOLFTPM2_DEV* dev, WOLFTPM2_KEY* key,
59905990
printf("TPM2_EncryptDecrypt2 failed 0x%x: %s\n", rc,
59915991
TPM2_GetRCString(rc));
59925992
#endif
5993+
TPM2_ForceZero(&encDecIn, sizeof(encDecIn));
5994+
TPM2_ForceZero(&encDecOut, sizeof(encDecOut));
59935995
return rc;
59945996
}
59955997

@@ -6005,6 +6007,8 @@ int wolfTPM2_EncryptDecryptBlock(WOLFTPM2_DEV* dev, WOLFTPM2_KEY* key,
60056007
inOutSz = encDecOut.outData.size;
60066008
XMEMCPY(out, encDecOut.outData.buffer, inOutSz);
60076009

6010+
TPM2_ForceZero(&encDecIn, sizeof(encDecIn));
6011+
TPM2_ForceZero(&encDecOut, sizeof(encDecOut));
60086012
return rc;
60096013
}
60106014

0 commit comments

Comments
 (0)