From 3b544b8584cf2f73b017235537260cdafd11c372 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Kin=C4=8Dl?= Date: Thu, 16 May 2019 16:41:31 +0200 Subject: [PATCH] Fixed use of uninitialized value in wc_BufferKeyEncrypt. --- wolfcrypt/src/wc_encrypt.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/wolfcrypt/src/wc_encrypt.c b/wolfcrypt/src/wc_encrypt.c index 373b6b938..f0c86a076 100644 --- a/wolfcrypt/src/wc_encrypt.c +++ b/wolfcrypt/src/wc_encrypt.c @@ -329,6 +329,8 @@ int wc_BufferKeyEncrypt(EncryptedInfo* info, byte* der, word32 derSz, } #endif /* WOLFSSL_SMALL_STACK */ + (void)XMEMSET(key, 0, WC_MAX_SYM_KEY_SIZE); + #ifndef NO_PWDBASED if ((ret = wc_PBKDF1(key, password, passwordSz, info->iv, PKCS5_SALT_SZ, 1, info->keySz, hashType)) != 0) {