F-2389 - https://fenrir.wolfssl.com/finding/2389 - Zero token master encryption key on C_Logout

aidangarske · aidangarske · commit 4b10e56f4e88 · 2026-04-08T11:47:00.000-07:00
diff --git a/src/internal.c b/src/internal.c
@@ -6963,6 +6963,7 @@ void WP11_Slot_Logout(WP11_Slot* slot)
             object = object->next;
         }
     }
+    wc_ForceZero(slot->token.key, sizeof(slot->token.key));
 #endif
     slot->token.loginState = WP11_APP_STATE_RW_PUBLIC;
 

Original file line number	Diff line number	Diff line change
`@@ -6963,6 +6963,7 @@ void WP11_Slot_Logout(WP11_Slot* slot)`
`6963`	`6963`	`object = object->next;`
`6964`	`6964`	`}`
`6965`	`6965`	`}`
	`6966`	`+ wc_ForceZero(slot->token.key, sizeof(slot->token.key));`
`6966`	`6967`	`#endif`
`6967`	`6968`	`slot->token.loginState = WP11_APP_STATE_RW_PUBLIC;`
`6968`	`6969`