From 90d5d44910b4f36ec2db06c0c44434d32b1daa14 Mon Sep 17 00:00:00 2001
From: John Safranek <john@wolfssl.com>
Date: Thu, 7 May 2026 10:40:13 -0700
Subject: [PATCH] wolfsshd: zero stored hash copy before free

Issue: F-57
---
 apps/wolfsshd/auth.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/wolfsshd/auth.c b/apps/wolfsshd/auth.c
index 47689a26..60cef92e 100644
--- a/apps/wolfsshd/auth.c
+++ b/apps/wolfsshd/auth.c
@@ -437,6 +437,7 @@ static int CheckPasswordUnix(const char* usr, const byte* pw, word32 pwSz, WOLFS
         WFREE(pwStr, NULL, DYNTYPE_STRING);
     }
     if (storedHashCpy != NULL) {
+        ForceZero(storedHashCpy, (word32)WSTRLEN(storedHashCpy) + 1);
         WFREE(storedHashCpy, NULL, DYNTYPE_STRING);
     }