From 884249316be4de3ab5cbdf7c397e0d076042e2d2 Mon Sep 17 00:00:00 2001
From: Daniele Lacamera <root@danielinux.net>
Date: Fri, 10 Apr 2026 05:47:06 +0200
Subject: [PATCH] update: always scrub final swap buffer

Ensure tmpBuffer is zeroized on the common exit path in wolfBoot_swap_and_final_erase, not only in EXT_ENCRYPTED builds.

F/CI
---
 src/update_flash.c | 2 --
 1 file changed, 2 deletions(-)

diff --git a/src/update_flash.c b/src/update_flash.c
index a39254a8..baf16b69 100644
--- a/src/update_flash.c
+++ b/src/update_flash.c
@@ -542,9 +542,7 @@ static int RAMFUNCTION wolfBoot_swap_and_final_erase(int resume)
 #endif
     hal_flash_lock();
 
-#ifdef EXT_ENCRYPTED
     wolfBoot_zeroize(tmpBuffer, sizeof(tmpBuffer));
-#endif
     (void)ret;
     return 0;
 }