From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 30 Sep 2021 13:37:46 +0000 (+0200)
Subject: swanctl: Clear possibly unencrypted key/container files from memory
X-Git-Tag: 5.9.4dr3~5
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b667eb37b9e5aab1e96245b10db7df184f05e45d;p=thirdparty%2Fstrongswan.git

swanctl: Clear possibly unencrypted key/container files from memory
---

diff --git a/src/swanctl/commands/load_creds.c b/src/swanctl/commands/load_creds.c
index 2c1947dd1e..c6c24d2337 100644
--- a/src/swanctl/commands/load_creds.c
+++ b/src/swanctl/commands/load_creds.c
@@ -445,7 +445,7 @@ static void load_keys(load_ctx_t *ctx, char *type, char *dir)
 					{
 						load_key(ctx, path, type, *map);
 					}
-					chunk_unmap(map);
+					chunk_unmap_clear(map);
 				}
 				else
 				{
@@ -552,7 +552,7 @@ static void load_containers(load_ctx_t *ctx, char *type, char *dir)
 				if (map)
 				{
 					load_encrypted_container(ctx, rel, path, type, *map);
-					chunk_unmap(map);
+					chunk_unmap_clear(map);
 				}
 				else
 				{