Secure-clear decrypted key on free

JeremiahM37 · JeremiahM37 · commit 4a3f543813fa · 2026-04-06T14:40:31.000Z
diff --git a/src/wp_dec_epki2pki.c b/src/wp_dec_epki2pki.c
@@ -261,7 +261,7 @@ static int wp_epki2pki_decode(wp_Epki2Pki* ctx, OSSL_CORE_BIO* coreBio,
     }
 
     /* Dispose of the EPKI data buffer. */
-    OPENSSL_free(data);
+    OPENSSL_clear_free(data, len);
 
     OPENSSL_cleanse(password, sizeof(password));
 

Original file line number	Diff line number	Diff line change
`@@ -261,7 +261,7 @@ static int wp_epki2pki_decode(wp_Epki2Pki* ctx, OSSL_CORE_BIO* coreBio,`
`261`	`261`	`}`
`262`	`262`
`263`	`263`	`/* Dispose of the EPKI data buffer. */`
`264`		`- OPENSSL_free(data);`
	`264`	`+ OPENSSL_clear_free(data, len);`
`265`	`265`
`266`	`266`	`OPENSSL_cleanse(password, sizeof(password));`
`267`	`267`