Secure-clear CMAC context on free

JeremiahM37 · JeremiahM37 · commit 7c896b25beb2 · 2026-04-06T14:40:31.000Z
diff --git a/src/wp_cmac.c b/src/wp_cmac.c
@@ -91,7 +91,7 @@ static void wp_cmac_free(wp_CmacCtx* macCtx)
 {
     if (macCtx != NULL) {
         OPENSSL_cleanse(macCtx->key, macCtx->keyLen);
-        OPENSSL_free(macCtx);
+        OPENSSL_clear_free(macCtx, sizeof(*macCtx));
     }
 }
 

Original file line number	Diff line number	Diff line change
`@@ -91,7 +91,7 @@ static void wp_cmac_free(wp_CmacCtx* macCtx)`
`91`	`91`	`{`
`92`	`92`	`if (macCtx != NULL) {`
`93`	`93`	`OPENSSL_cleanse(macCtx->key, macCtx->keyLen);`
`94`		`- OPENSSL_free(macCtx);`
	`94`	`+ OPENSSL_clear_free(macCtx, sizeof(*macCtx));`
`95`	`95`	`}`
`96`	`96`	`}`
`97`	`97`