From: Krzysztof Jackiewicz <k.jackiewicz@samsung.com>
Date: Wed, 13 Jul 2016 15:10:21 +0000 (+0200)
Subject: Clear the memory before freeing a symmetric key
X-Git-Tag: accepted/tizen/common/20160810.161523~11
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=d9d0a068e0d1ad0deacd21c701f846bc85977b5a;p=platform%2Fcore%2Fsecurity%2Fyaca.git

Clear the memory before freeing a symmetric key

Change-Id: Iaffaf927709dfcfb831d7973d87d5a2ee5194bf0
---

diff --git a/src/key.c b/src/key.c
index e018d14..9d14cf7 100644
--- a/src/key.c
+++ b/src/key.c
@@ -1281,8 +1281,10 @@ API void yaca_key_destroy(yaca_key_h key)
 	struct yaca_key_simple_s *simple_key = key_get_simple(key);
 	struct yaca_key_evp_s *evp_key = key_get_evp(key);
 
-	if (simple_key != NULL)
+	if (simple_key != NULL) {
+		OPENSSL_cleanse(simple_key->d, simple_key->bit_len / 8);
 		yaca_free(simple_key);
+	}
 
 	if (evp_key != NULL) {
 		EVP_PKEY_free(evp_key->evp);