F-2390 - https://fenrir.wolfssl.com/finding/2390 - Clean HMAC/CMAC/Digest crypto state on session close

Author: aidangarske

src/internal.c

@@ -954,6 +954,23 @@ static void wp11_Session_Final(WP11_Session* session)
     }
 #endif
 #endif
+    if ((session->init & ~WP11_INIT_DIGEST_MASK) == WP11_INIT_HMAC_SIGN ||
+        (session->init & ~WP11_INIT_DIGEST_MASK) == WP11_INIT_HMAC_VERIFY) {
+        wc_HmacFree(&session->params.hmac.hmac);
+        session->init = 0;
+    }
+#ifdef WOLFSSL_CMAC
+    if ((session->init & ~WP11_INIT_DIGEST_MASK) == WP11_INIT_AES_CMAC_SIGN ||
+        (session->init & ~WP11_INIT_DIGEST_MASK) == WP11_INIT_AES_CMAC_VERIFY) {
+        (void)wc_CmacFree(&session->params.cmac.cmac);
+        session->init = 0;
+    }
+#endif
+    if ((session->init & ~WP11_INIT_DIGEST_MASK) == WP11_INIT_DIGEST) {
+        wc_HashFree(&session->params.digest.hash,
+                     session->params.digest.hashType);
+        session->init = 0;
+    }
 }
 
 #ifndef WOLFPKCS11_NO_STORE