wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 18:30:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix invalid preprocessor guard in PKCS7 with SHA224

Browse Source 
Also add missing ForceZero for ECDH shared secret on the heap.
This commit is contained in:
Tobias Frauenschläger
2026-04-13 15:58:47 +02:00
parent 5634cfd67c
commit 16e1d33f24
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/pkcs7.c
+3 -1
View File
@@ -7782,7 +7782,7 @@ static int wc_PKCS7_KariGenerateKEK(WC_PKCS7_KARI* kari, WC_RNG* rng,
kdfType = WC_HASH_TYPE_SHA;
break;
#endif
#ifndef WOLFSSL_SHA224
#ifdef WOLFSSL_SHA224
case dhSinglePass_stdDH_sha224kdf_scheme:
kdfType = WC_HASH_TYPE_SHA224;
break;
@@ -7804,6 +7804,7 @@ static int wc_PKCS7_KariGenerateKEK(WC_PKCS7_KARI* kari, WC_RNG* rng,
#endif
default:
WOLFSSL_MSG("Unsupported key agreement algorithm");
ForceZero(secret, secretSz);
XFREE(secret, kari->heap, DYNAMIC_TYPE_PKCS7);
return BAD_FUNC_ARG;
};
@@ -7816,6 +7817,7 @@ static int wc_PKCS7_KariGenerateKEK(WC_PKCS7_KARI* kari, WC_RNG* rng,
ret = NOT_COMPILED_IN;
#endif
ForceZero(secret, secretSz);
XFREE(secret, kari->heap, DYNAMIC_TYPE_PKCS7);
return ret;
}