From e0c78d751664418b1cba6113350f9ea1e7c6a29a Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 25 Jul 2017 10:15:58 +0200
Subject: [PATCH] prf-plus: Wipe seed and internal buffer

The buffer contains key material we handed out last and the seed can
contain the DH secret.

References #2388.
---
 src/libstrongswan/crypto/prf_plus.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/libstrongswan/crypto/prf_plus.c b/src/libstrongswan/crypto/prf_plus.c
index 6b7f8f851..a26010aae 100644
--- a/src/libstrongswan/crypto/prf_plus.c
+++ b/src/libstrongswan/crypto/prf_plus.c
@@ -115,8 +115,8 @@ METHOD(prf_plus_t, allocate_bytes, bool,
 METHOD(prf_plus_t, destroy, void,
 	private_prf_plus_t *this)
 {
-	free(this->buffer.ptr);
-	free(this->seed.ptr);
+	chunk_clear(&this->buffer);
+	chunk_clear(&this->seed);
 	free(this);
 }