ForceZero on RSA key decoding

LinuxJedi · LinuxJedi · commit 75d318bf4711 · 2026-03-21T11:07:21.000Z
F-822
diff --git a/src/internal.c b/src/internal.c
@@ -3630,7 +3630,7 @@ static int wp11_Object_Decode_RsaKey(WP11_Object* object)
         if (ret == 0) {
             /* Decode RSA private key. */
             ret = wc_RsaPrivateKeyDecode(der, &idx, key, len);
-            XMEMSET(der, 0, len);
+            wc_ForceZero(der, len);
         }
         if (der != NULL)
             XFREE(der, NULL, DYNAMIC_TYPE_TMP_BUFFER);

Original file line number	Diff line number	Diff line change
`@@ -3630,7 +3630,7 @@ static int wp11_Object_Decode_RsaKey(WP11_Object* object)`
`3630`	`3630`	`if (ret == 0) {`
`3631`	`3631`	`/* Decode RSA private key. */`
`3632`	`3632`	`ret = wc_RsaPrivateKeyDecode(der, &idx, key, len);`
`3633`		`- XMEMSET(der, 0, len);`
	`3633`	`+ wc_ForceZero(der, len);`
`3634`	`3634`	`}`
`3635`	`3635`	`if (der != NULL)`
`3636`	`3636`	`XFREE(der, NULL, DYNAMIC_TYPE_TMP_BUFFER);`