Skip to content

Commit a9268de

Browse files
committed
JCE: zero privKeyBytes buffer before leaking wolfCryptInitPrivateKey
1 parent ced9f4b commit a9268de

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

src/main/java/com/wolfssl/provider/jce/WolfCryptSignature.java

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -345,7 +345,11 @@ private void wolfCryptInitPrivateKey(PrivateKey key, byte[] encodedKey)
345345
privKeyBytes = ecPriv.getS().toByteArray();
346346
}
347347

348-
this.ecc.importPrivate(privKeyBytes, null);
348+
try {
349+
this.ecc.importPrivate(privKeyBytes, null);
350+
} finally {
351+
zeroArray(privKeyBytes);
352+
}
349353

350354
break;
351355
}

0 commit comments

Comments
 (0)