mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-03-01 13:13:28 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Demonstrate safe usage (zeroize) in ssl_client2

Browse Source
This commit is contained in:
Manuel Pégourié-Gonnard 2019-05-24 10:26:41 +02:00 committed by Jarno Lamsa
parent 6472263ead
commit 4d591d6d3f
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
programs/ssl/ssl_client2.c
View File

@ -2459,8 +2459,12 @@ int main( int argc, char *argv[] )
if( opt.reco_mode == 1 ) if( opt.reco_mode == 1 )
{ {
/* free any previously saved data */ /* free any previously saved data */
mbedtls_free( session_data ); if( session_data != NULL )
session_data = NULL; {
mbedtls_platform_zeroize( session_data, session_data_len );
mbedtls_free( session_data );
session_data = NULL;
}
/* get size of the buffer needed */ /* get size of the buffer needed */
mbedtls_ssl_session_save( mbedtls_ssl_get_session_pointer( &ssl ), mbedtls_ssl_session_save( mbedtls_ssl_get_session_pointer( &ssl ),
@ -3024,6 +3028,8 @@ exit:
mbedtls_ssl_config_free( &conf ); mbedtls_ssl_config_free( &conf );
mbedtls_ctr_drbg_free( &ctr_drbg ); mbedtls_ctr_drbg_free( &ctr_drbg );
mbedtls_entropy_free( &entropy ); mbedtls_entropy_free( &entropy );
if( session_data != NULL )
mbedtls_platform_zeroize( session_data, session_data_len );
mbedtls_free( session_data ); mbedtls_free( session_data );
#if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) && \ #if defined(MBEDTLS_KEY_EXCHANGE__SOME__PSK_ENABLED) && \