ForceZero on ECC key decode

LinuxJedi · LinuxJedi · commit a37de0fafcb6 · 2026-03-21T11:08:24.000Z
F-823
diff --git a/src/internal.c b/src/internal.c
@@ -3979,7 +3979,7 @@ static int wp11_Object_Decode_EccKey(WP11_Object* object)
         if (ret == 0) {
             /* Decode ECC private key. */
             ret = wc_EccPrivateKeyDecode(der, &idx, key, len);
-            XMEMSET(der, 0, len);
+            wc_ForceZero(der, len);
         }
         if (der != NULL)
             XFREE(der, NULL, DYNAMIC_TYPE_TMP_BUFFER);

Original file line number	Diff line number	Diff line change
`@@ -3979,7 +3979,7 @@ static int wp11_Object_Decode_EccKey(WP11_Object* object)`
`3979`	`3979`	`if (ret == 0) {`
`3980`	`3980`	`/* Decode ECC private key. */`
`3981`	`3981`	`ret = wc_EccPrivateKeyDecode(der, &idx, key, len);`
`3982`		`- XMEMSET(der, 0, len);`
	`3982`	`+ wc_ForceZero(der, len);`
`3983`	`3983`	`}`
`3984`	`3984`	`if (der != NULL)`
`3985`	`3985`	`XFREE(der, NULL, DYNAMIC_TYPE_TMP_BUFFER);`