commit 2d829fb4b367427749727aeabb1bbfbd0f244567
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Wed Jul 12 11:01:32 2017 +0100
committer Andres Amaya Garcia <andres.amayagarcia@arm.com> Wed Jul 12 11:04:28 2017 +0100
tree 477af828cfda6915391980cd2b426fcdba5b6808
parent 1bfa46a45617d7ddb1403900a0f8f53158aac66a

Zeroize buf if mbedtls_base64_decode() fails

library/pem.c

diff --git a/library/pem.c b/library/pem.c
index 611c788..789a92d 100644
--- a/library/pem.c
+++ b/library/pem.c
@@ -333,6 +333,7 @@
 
     if( ( ret = base64_decode( buf, &len, s1, s2 - s1 ) ) != 0 )
     {
+        polarssl_zeroize( buf, len );
         polarssl_free( buf );
         return( POLARSSL_ERR_PEM_INVALID_DATA + ret );
     }