user-record: securely erase pkcs#11 when assigned NULL too

diff --git a/src/shared/user-record.c b/src/shared/user-record.c
index 83d86f69e761ab0a22a2366a0b20476a3a489072..f6f67eabc0a2463e790193d698fbb40f9cab543b 100644 (file)
--- a/src/shared/user-record.c
+++ b/src/shared/user-record.c
@@ -706,7 +706,7 @@ static int dispatch_pkcs11_key_data(const char *name, JsonVariant *variant, Json
         int r;
 
         if (json_variant_is_null(variant)) {
-                k->data = mfree(k->data);
+                k->data = erase_and_free(k->data);
                 k->size = 0;
                 return 0;
         }