WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity

F-12755 - Zeroize the session start nonce structures on all exits

pull/604/head
Aidan Garske 2026-09-10 11:31:54 -07:00
parent facc55c239
commit 651a35f2a5
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/tpm2_wrap.c
View File

@ -2904,6 +2904,8 @@ int wolfTPM2_StartSession_ex(WOLFTPM2_DEV* dev, WOLFTPM2_SESSION* session,
#ifdef DEBUG_WOLFTPM
printf("TPM2_GetNonce failed %d: %s\n", rc, wolfTPM2_GetRCString(rc));
#endif
TPM2_ForceZero(&authSesIn, sizeof(authSesIn));
TPM2_ForceZero(&authSesOut, sizeof(authSesOut));
return rc;
}
@ -2913,6 +2915,8 @@ int wolfTPM2_StartSession_ex(WOLFTPM2_DEV* dev, WOLFTPM2_SESSION* session,
rc = TPM2_GetNonceNoLock(session->salt.buffer, session->salt.size);
if (rc != 0) {
TPM2_ForceZero(&session->salt, sizeof(session->salt));
TPM2_ForceZero(&authSesIn, sizeof(authSesIn));
TPM2_ForceZero(&authSesOut, sizeof(authSesOut));
return rc;
}
@ -2925,6 +2929,8 @@ int wolfTPM2_StartSession_ex(WOLFTPM2_DEV* dev, WOLFTPM2_SESSION* session,
wolfTPM2_GetRCString(rc));
#endif
TPM2_ForceZero(&session->salt, sizeof(session->salt));
TPM2_ForceZero(&authSesIn, sizeof(authSesIn));
TPM2_ForceZero(&authSesOut, sizeof(authSesOut));
return rc;
}
}