Commit 71c94d3c authored by Matt Caswell's avatar Matt Caswell
Browse files

Make sure we also cleanse the finished key 



Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2259)
parent f4bbb37c

ssl/statem/extensions_clnt.c

+1 −0
Original line number Diff line number Diff line
@@ -820,6 +820,7 @@ int tls_construct_ctos_psk(SSL *s, WPACKET *pkt, X509 *x, size_t chainidx, 
    ret = 1;

 err:

    OPENSSL_cleanse(binderkey, sizeof(binderkey));

    OPENSSL_cleanse(finishedkey, sizeof(finishedkey));

    EVP_PKEY_free(mackey);

    EVP_MD_CTX_free(mctx);