wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-07 06:10:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update the PKCS11 ECC and dilithium free handlers so they will now return CRYPTOCB_UNAVAILABLE after attempting the context free so the caller still does software cleanup on the rest of the context that the callback does not handle.

Browse Source
This commit is contained in:
night1rider
2026-03-12 14:57:26 -06:00
parent 5ff2b55345
commit 2626f976f5
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/wc_pkcs11.c
+11
View File
@@ -5794,6 +5794,12 @@ int wc_Pkcs11_CryptoDevCb(int devId, wc_CryptoInfo* info, void* ctx)
(ecc_key*)info->free.obj);
Pkcs11CloseSession(token, &session);
}
/* Return CRYPTOCB_UNAVAILABLE so wc_ecc_free() still
* performs software cleanup. This callback only releases
* the HSM object. Conditional because wc_ecc_free returns
* int and can propagate an HSM error to the caller. */
if (ret == 0)
ret = CRYPTOCB_UNAVAILABLE;
}
else
#endif
@@ -5807,6 +5813,11 @@ int wc_Pkcs11_CryptoDevCb(int devId, wc_CryptoInfo* info, void* ctx)
(MlDsaKey*)info->free.obj);
Pkcs11CloseSession(token, &session);
}
/* Always return CRYPTOCB_UNAVAILABLE so wc_dilithium_free()
* performs software cleanup. This callback only releases
* the HSM object. Unconditional because wc_dilithium_free
* returns void and cannot propagate an error. */
ret = CRYPTOCB_UNAVAILABLE;
}
else
#endif