From 967aaa2c56233b8aa05988f06747d17462391a8d Mon Sep 17 00:00:00 2001
From: Eric Blankenhorn <eric@wolfssl.com>
Date: Thu, 5 Mar 2026 15:14:47 -0600
Subject: [PATCH] Fix F380 to harden wc_MakeDsaKey

---
 wolfcrypt/src/dsa.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wolfcrypt/src/dsa.c b/wolfcrypt/src/dsa.c
index 7bf4702d09..1b8119d776 100644
--- a/wolfcrypt/src/dsa.c
+++ b/wolfcrypt/src/dsa.c
@@ -231,6 +231,7 @@ int wc_MakeDsaKey(WC_RNG *rng, DsaKey *dsa)
         mp_clear(&dsa->y);
     }
 
+    ForceZero(cBuf, cSz);
 #if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
     XFREE(cBuf, dsa->heap, DYNAMIC_TYPE_TMP_BUFFER);
     if (tmpQ != NULL) {