From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 30 Sep 2021 13:33:40 +0000 (+0200)
Subject: pem: Clear possibly unencrypted key file from memory
X-Git-Tag: 5.9.4dr3~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3a739424e1f5a39d55e0ed7cb9fb754aa67e24c0;p=thirdparty%2Fstrongswan.git

pem: Clear possibly unencrypted key file from memory
---

diff --git a/src/libstrongswan/plugins/pem/pem_builder.c b/src/libstrongswan/plugins/pem/pem_builder.c
index 9ca96a4d21..bdf0aec9ae 100644
--- a/src/libstrongswan/plugins/pem/pem_builder.c
+++ b/src/libstrongswan/plugins/pem/pem_builder.c
@@ -450,7 +450,7 @@ static void *load_from_file(char *file, credential_type_t type, int subtype,
 		return NULL;
 	}
 	cred = load_from_blob(*chunk, type, subtype, subject, flags);
-	chunk_unmap(chunk);
+	chunk_unmap_clear(chunk);
 	return cred;
 }