pki: Make sure to wipe decrypted PKCS#7 data

diff --git a/src/pki/commands/pkcs7.c b/src/pki/commands/pkcs7.c
index 8d3528fdc11c3a7d37711fbbbc13f03b049044d0..074beeab5157fd99bde7440cfc464c401606b4c6 100644 (file)
--- a/src/pki/commands/pkcs7.c
+++ b/src/pki/commands/pkcs7.c
@@ -235,8 +235,7 @@ static int decrypt(chunk_t chunk)
        container->destroy(container);
 
        write_to_stream(stdout, data);
-       free(data.ptr);
-
+       chunk_clear(&data);
        return 0;
 }
 

diff --git a/src/pki/commands/scep.c b/src/pki/commands/scep.c
index f5cc93084df1c3eab53cc39ee0a461ab28b4914e..a1f0530a99c43debd58450fcd8da3bc491ddc4e8 100644 (file)
--- a/src/pki/commands/scep.c
+++ b/src/pki/commands/scep.c
@@ -587,7 +587,7 @@ end:
        if (status == 0)
        {
                status = pki_cert_extract_cert(data, form) ? 0 : 1;
-               chunk_free(&data);
+               chunk_clear(&data);
        }
 
 err: