Commit 8f39d8af authored by Shane Lontis's avatar Shane Lontis Committed by Pauli
Browse files

key zeroization fix for a branch path of tls13_final_finish_mac 



Reviewed-by: default avatarPaul Yang <yang.yang@baishancloud.com>
Reviewed-by: default avatarPaul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/7110)
parent 17147181

ssl/tls13_enc.c

+1 −0
Original line number Original line Diff line number Diff line
@@ -271,6 +271,7 @@ size_t tls13_final_finish_mac(SSL *s, const char *str, size_t slen, 




        key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, finsecret,

        key = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, finsecret,

                                           hashlen);

                                           hashlen);

        OPENSSL_cleanse(finsecret, sizeof(finsecret));

    }

    }





    if (key == NULL

    if (key == NULL