ForceZero on AES encode

LinuxJedi · LinuxJedi · commit e2e301dd6765 · 2026-03-21T11:10:41.000Z
F-825
diff --git a/src/internal.c b/src/internal.c
@@ -5354,7 +5354,7 @@ static int wp11_Object_Encode(WP11_Object* object, int protect)
             case CKK_GENERIC_SECRET:
                 ret = wp11_Object_Encode_SymmKey(object);
                 if (protect && ret == 0) {
-                    XMEMSET(object->data.symmKey->data, 0, object->data.symmKey->len);
+                    wc_ForceZero(object->data.symmKey->data, object->data.symmKey->len);
                     object->encoded = 1;
                 }
                 break;

Original file line number	Diff line number	Diff line change
`@@ -5354,7 +5354,7 @@ static int wp11_Object_Encode(WP11_Object* object, int protect)`
`5354`	`5354`	`case CKK_GENERIC_SECRET:`
`5355`	`5355`	`ret = wp11_Object_Encode_SymmKey(object);`
`5356`	`5356`	`if (protect && ret == 0) {`
`5357`		`- XMEMSET(object->data.symmKey->data, 0, object->data.symmKey->len);`
	`5357`	`+ wc_ForceZero(object->data.symmKey->data, object->data.symmKey->len);`
`5358`	`5358`	`object->encoded = 1;`
`5359`	`5359`	`}`
`5360`	`5360`	`break;`