yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-26 03:55:39 +01:00
Code Issues Packages Projects Releases Wiki Activity

pkcs11: zeroize buffer earlier on failure

Browse Source 
Change the buffer zeroization so that it happens earlier
This commit is contained in:
Andrzej Kurek 2018-03-20 05:02:29 -04:00
parent 686a05e90c
commit b23b04d177
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
library/pkcs11_client.c
View File

@ -157,6 +157,8 @@ static int pkcs11_sign_core( mbedtls_pk_pkcs11_context_t *ctx,
goto exit; goto exit;
*sig_len = ck_sig_len; *sig_len = ck_sig_len;
exit: exit:
if( rv != CKR_OK )
memset( sig, 0, ck_sig_len );
return( pkcs11_err_to_mbedtls_pk_err( rv ) ); return( pkcs11_err_to_mbedtls_pk_err( rv ) );
} }
#endif /* MBEDTLS_RSA_C */ #endif /* MBEDTLS_RSA_C */
@ -226,8 +228,6 @@ static int pkcs11_sign( void *ctx_arg,
return( MBEDTLS_ERR_PK_UNKNOWN_PK_ALG ); return( MBEDTLS_ERR_PK_UNKNOWN_PK_ALG );
} }
if( ret != 0 )
memset( sig, 0, *sig_len );
return( ret ); return( ret );
} }