in addition to 'm'/'c' mode, asn1_wrap accepts a 's' mode clearing sensitive information

2009-08-26 11:23:51 +02:00
parent d9b24887a4
commit 957d116328
2 changed files with 14 additions and 3 deletions
@@ -832,9 +832,16 @@ chunk_t asn1_wrap(asn1_t type, const char *mode, ...)
 		memcpy(pos, ch.ptr, ch.len);
 		pos += ch.len;

-		if (*mode++ == 'm')
+		switch (*mode++)
 		{
-			free(ch.ptr);
+			case 's':
+				chunk_clear(&ch);
+				break;
+			case 'm':
+				free(ch.ptr);
+				break;
+			default:
+				break;
 		}
 	}
 	va_end(chunks);