Fix finding 350

padelsbach · padelsbach · commit c2a0b9f7d7e7 · 2026-03-06T14:31:58.000-08:00
diff --git a/src/tpm2_wrap.c b/src/tpm2_wrap.c
@@ -3507,10 +3507,13 @@ int wolfTPM2_ImportPrivateKeyBuffer(WOLFTPM2_DEV* dev,
 
 #ifdef WOLFTPM2_PEM_DECODE
     if (derBuf != (byte*)input) {
+        TPM2_ForceZero(derBuf, derSz);
         XFREE(derBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER);
     }
 #endif
 
+    TPM2_ForceZero(&sens, sizeof(sens));
+
     return rc;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -3507,10 +3507,13 @@ int wolfTPM2_ImportPrivateKeyBuffer(WOLFTPM2_DEV* dev,`
`3507`	`3507`
`3508`	`3508`	`#ifdef WOLFTPM2_PEM_DECODE`
`3509`	`3509`	`if (derBuf != (byte*)input) {`
	`3510`	`+ TPM2_ForceZero(derBuf, derSz);`
`3510`	`3511`	`XFREE(derBuf, NULL, DYNAMIC_TYPE_TMP_BUFFER);`
`3511`	`3512`	`}`
`3512`	`3513`	`#endif`
`3513`	`3514`
	`3515`	`+ TPM2_ForceZero(&sens, sizeof(sens));`
	`3516`	`+`
`3514`	`3517`	`return rc;`
`3515`	`3518`	`}`
`3516`	`3519`