pkcs12: Make sure to wipe potentially decrypted PKCS#7 data

diff --git a/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c b/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
index 6f8f06f271d7e181dcd4d121823e7909e9451360..bed02cc423119a204c8a1de8f6656d6979cd4f52 100644 (file)
--- a/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
+++ b/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
@@ -307,10 +307,10 @@ static bool parse_authenticated_safe(private_pkcs12_t *this, chunk_t blob)
                                if (!parse_safe_contents(this, parser->get_level(parser)+1,
                                                                                 data))
                                {
-                                       chunk_free(&data);
+                                       chunk_clear(&data);
                                        goto end;
                                }
-                               chunk_free(&data);
+                               chunk_clear(&data);
                                break;
                        }
                }