From: Thomas Egerer <thomas.egerer@secunet.com>
Date: Fri, 4 Nov 2011 08:24:58 +0000 (+0100)
Subject: Use chunk_clear to memwipe shared secret
X-Git-Tag: 4.6.0~12
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=42e2da606c1a90b19a0aaca36b02785306fec2dc;p=thirdparty%2Fstrongswan.git

Use chunk_clear to memwipe shared secret
---

diff --git a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
index 78ed2811aa..9e40675893 100644
--- a/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
+++ b/src/libstrongswan/plugins/openssl/openssl_ec_diffie_hellman.c
@@ -219,7 +219,7 @@ METHOD(diffie_hellman_t, set_other_public_value, void,
 		return;
 	}
 
-	chunk_free(&this->shared_secret);
+	chunk_clear(&this->shared_secret);
 
 	if (!compute_shared_key(this, &this->shared_secret)) {
 		DBG1(DBG_LIB, "ECDH shared secret computation failed");