prf-plus: Wipe seed and internal buffer

The buffer contains key material we handed out last and the seed can
contain the DH secret.

References #2388.

diff --git a/src/libstrongswan/crypto/prf_plus.c b/src/libstrongswan/crypto/prf_plus.c
index 6b7f8f85168134d975b1d7504d45446851dca128..a26010aaedb9eb663fa2cab11bf9e728d37a0b01 100644 (file)
--- a/src/libstrongswan/crypto/prf_plus.c
+++ b/src/libstrongswan/crypto/prf_plus.c
@@ -115,8 +115,8 @@ METHOD(prf_plus_t, allocate_bytes, bool,
 METHOD(prf_plus_t, destroy, void,
        private_prf_plus_t *this)
 {
-       free(this->buffer.ptr);
-       free(this->seed.ptr);
+       chunk_clear(&this->buffer);
+       chunk_clear(&this->seed);
        free(this);
 }