Zero out buffer on error in AES_GCM_decrypt_C.

Fixes F-5393.
2026-07-10 21:00:52 +02:00 · 2026-06-12 12:14:48 -07:00
parent e0a8f3f475
commit c677768375
1 changed files with 3 additions and 0 deletions
@@ -11445,6 +11445,9 @@ int WARN_UNUSED_RESULT AES_GCM_decrypt_C(
    ret = (ret & ~res);
    ret |= (res & WC_NO_ERR_TRACE(AES_GCM_AUTH_E));
 #endif
+    if (ret != 0) {
+        ForceZero(out, sz);
+    }
    return ret;
 }
 #elif (defined(__aarch64__) || defined(WOLFSSL_ARMASM_NO_HW_CRYPTO)) || \