hs: Wipe memory after RENDEZVOUS2 handling

Signed-off-by: David Goulet <dgoulet@torproject.org>

diff --git a/src/feature/hs/hs_client.c b/src/feature/hs/hs_client.c
index 2bb59f078e8d814c5c845b5cfb8c4ef136e9f048..9a0932abded621352458441a4dcf061583c4f19c 100644 (file)
--- a/src/feature/hs/hs_client.c
+++ b/src/feature/hs/hs_client.c
@@ -1448,6 +1448,9 @@ handle_rendezvous2(origin_circuit_t *circ, const uint8_t *payload,
  err:
   circuit_mark_for_close(TO_CIRCUIT(circ), END_CIRC_REASON_TORPROTOCOL);
  end:
+  memwipe(auth_mac, 0, sizeof(auth_mac));
+  memwipe(handshake_info, 0, sizeof(handshake_info));
+  memwipe(&server_pk, 0, sizeof(server_pk));
   memwipe(&keys, 0, sizeof(keys));
   return ret;
 }