Zeroize temporary stack buffer

Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>
This commit is contained in:
Manuel Pégourié-Gonnard 2020-06-17 12:40:57 +02:00
parent 2d91c30f4c
commit a90a95bcbd

View File

@ -321,10 +321,10 @@ static int ecp_drbg_random( void *p_rng, unsigned char *output, size_t output_le
ecp_drbg_context *ctx = p_rng;
int ret;
size_t len_done = 0;
uint8_t tmp[HASH_BLOCK_BYTES];
while( len_done < output_len )
{
uint8_t tmp[HASH_BLOCK_BYTES];
uint8_t use_len;
/* We don't need to draw more that 255 blocks, so don't bother with
@ -346,6 +346,8 @@ static int ecp_drbg_random( void *p_rng, unsigned char *output, size_t output_le
len_done += use_len;
}
mbedtls_platform_zeroize( tmp, sizeof( tmp ) );
return( 0 );
}