diff --git a/library/ssl_srv.c b/library/ssl_srv.c
index 213cd3c..5190367 100644
--- a/library/ssl_srv.c
+++ b/library/ssl_srv.c
@@ -2801,9 +2801,9 @@
     }
 
     /* Move semantics */
-    /* Zeroization of session_tmp happens at the end of the function. */
     mbedtls_ssl_session_free( session );
     *session = session_tmp;
+    memset( &session_tmp, 0, sizeof( mbedtls_ssl_session ) );
 
     MBEDTLS_SSL_DEBUG_MSG( 3, ( "session successfully restored from cache" ) );
     ssl->handshake->resume = 1;