pkcs7: Make sure to wipe decrypted content

diff --git a/src/libstrongswan/plugins/pkcs7/pkcs7_encrypted_data.c b/src/libstrongswan/plugins/pkcs7/pkcs7_encrypted_data.c
index 1c900ddcc565456050ed60c498883e99d4dd20c1..472e72e2a7f74dde54fdc186f8a0b08eff9342bb 100644 (file)
--- a/src/libstrongswan/plugins/pkcs7/pkcs7_encrypted_data.c
+++ b/src/libstrongswan/plugins/pkcs7/pkcs7_encrypted_data.c
@@ -170,7 +170,7 @@ METHOD(container_t, get_encoding, bool,
 METHOD(container_t, destroy, void,
        private_pkcs7_encrypted_data_t *this)
 {
-       free(this->content.ptr);
+       chunk_clear(&this->content);
        free(this->encoding.ptr);
        free(this);
 }

diff --git a/src/libstrongswan/plugins/pkcs7/pkcs7_enveloped_data.c b/src/libstrongswan/plugins/pkcs7/pkcs7_enveloped_data.c
index 14bfaf37723bb287c421ffe4cb8078c8d1477969..8b26bad3ac4344583e9b0dc3f42a96132c9bbccd 100644 (file)
--- a/src/libstrongswan/plugins/pkcs7/pkcs7_enveloped_data.c
+++ b/src/libstrongswan/plugins/pkcs7/pkcs7_enveloped_data.c
@@ -359,7 +359,7 @@ METHOD(container_t, get_encoding, bool,
 METHOD(container_t, destroy, void,
        private_pkcs7_enveloped_data_t *this)
 {
-       free(this->content.ptr);
+       chunk_clear(&this->content);
        free(this->encoding.ptr);
        free(this);
 }