WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity

F-12754 - Zeroize hash context and buffer in TPM2_HashNvPublic

pull/600/head
Aidan Garske 2026-09-08 12:53:14 -07:00
parent 1305585540
commit c9e49e03dd
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/tpm2.c
View File

@ -7538,6 +7538,7 @@ int TPM2_HashNvPublic(TPMS_NV_PUBLIC* nvPublic, byte* buffer, UINT16* size)
#ifndef WOLFTPM2_NO_WOLFCRYPT
int rc;
int hashSize, nameAlgSize;
int hashInitialized = 0;
UINT16 nameAlgValue;
wc_HashAlg hash;
enum wc_HashType hashType;
@ -7573,6 +7574,7 @@ int TPM2_HashNvPublic(TPMS_NV_PUBLIC* nvPublic, byte* buffer, UINT16* size)
rc = wc_HashInit(&hash, hashType);
if (rc == 0) {
hashInitialized = 1;
rc = wc_HashUpdate(&hash, hashType, packet.buf, packet.pos);
}
if (rc == 0) {
@ -7589,7 +7591,11 @@ int TPM2_HashNvPublic(TPMS_NV_PUBLIC* nvPublic, byte* buffer, UINT16* size)
rc = TPM_RC_SUCCESS;
}
wc_HashFree(&hash, hashType);
if (hashInitialized) {
wc_HashFree(&hash, hashType);
}
TPM2_ForceZero(&hash, sizeof(hash));
TPM2_ForceZero(appending, sizeof(appending));
return rc;
#else