Prevent leaking plaintext in psa_cipher_finish()

This commit is contained in:
Janos Follath 2018-07-09 16:13:21 +01:00 committed by itayzafrir
parent 315b51c22d
commit 279ab8e69b

View file

@ -2463,6 +2463,7 @@ psa_status_t psa_cipher_finish( psa_cipher_operation_t *operation,
goto error;
}
mbedtls_zeroize( temp_output_buffer, sizeof( temp_output_buffer ) );
status = psa_cipher_abort( operation );
return( status );
@ -2471,6 +2472,7 @@ error:
*output_length = 0;
mbedtls_zeroize( temp_output_buffer, sizeof( temp_output_buffer ) );
(void) psa_cipher_abort( operation );
return( status );