JNI: zero tmp output buffer from wc_AesCmacGenerate() (F-1959)

cconlon · cconlon · commit 2b54099328f2 · 2026-04-06T10:22:16.000-06:00
diff --git a/jni/jni_aescmac.c b/jni/jni_aescmac.c
@@ -332,6 +332,8 @@ JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_AesCmac_wc_1AesCmacGenerate(
             (*env)->SetByteArrayRegion(env, mac_object, 0, copySize,
                 (const jbyte*) tmp);
         }
+
+        XMEMSET(tmp, 0, sizeof(tmp));
     }
 
     LogStr("wc_AesCmacGenerate(data=%p, dataSz=%d, key=%p, keySz=%d) = %d\n",

Original file line number	Diff line number	Diff line change
`@@ -332,6 +332,8 @@ JNIEXPORT jint JNICALL Java_com_wolfssl_wolfcrypt_AesCmac_wc_1AesCmacGenerate(`
`332`	`332`	`(*env)->SetByteArrayRegion(env, mac_object, 0, copySize,`
`333`	`333`	`(const jbyte*) tmp);`
`334`	`334`	`}`
	`335`	`+`
	`336`	`+ XMEMSET(tmp, 0, sizeof(tmp));`
`335`	`337`	`}`
`336`	`338`
`337`	`339`	`LogStr("wc_AesCmacGenerate(data=%p, dataSz=%d, key=%p, keySz=%d) = %d\n",`