ForceZero on DH key encode

LinuxJedi · LinuxJedi · commit 4c03d3475647 · 2026-03-21T11:09:27.000Z
F-824
diff --git a/src/internal.c b/src/internal.c
@@ -5343,7 +5343,7 @@ static int wp11_Object_Encode(WP11_Object* object, int protect)
             case CKK_DH:
                 ret = wp11_Object_Encode_DhKey(object);
                 if (protect && ret == 0 && object->objClass == CKO_PRIVATE_KEY) {
-                    XMEMSET(object->data.dhKey->key, 0, object->data.dhKey->len);
+                    wc_ForceZero(object->data.dhKey->key, object->data.dhKey->len);
                     object->encoded = 1;
                 }
                 break;

Original file line number	Diff line number	Diff line change
`@@ -5343,7 +5343,7 @@ static int wp11_Object_Encode(WP11_Object* object, int protect)`
`5343`	`5343`	`case CKK_DH:`
`5344`	`5344`	`ret = wp11_Object_Encode_DhKey(object);`
`5345`	`5345`	`if (protect && ret == 0 && object->objClass == CKO_PRIVATE_KEY) {`
`5346`		`- XMEMSET(object->data.dhKey->key, 0, object->data.dhKey->len);`
	`5346`	`+ wc_ForceZero(object->data.dhKey->key, object->data.dhKey->len);`
`5347`	`5347`	`object->encoded = 1;`
`5348`	`5348`	`}`
`5349`	`5349`	`break;`