Fix F380 to harden wc_MakeDsaKey

embhorn · embhorn · commit 967aaa2c5623 · 2026-03-05T15:14:47.000-06:00
diff --git a/wolfcrypt/src/dsa.c b/wolfcrypt/src/dsa.c
@@ -231,6 +231,7 @@ int wc_MakeDsaKey(WC_RNG *rng, DsaKey *dsa)
         mp_clear(&dsa->y);
     }
 
+    ForceZero(cBuf, cSz);
 #if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)
     XFREE(cBuf, dsa->heap, DYNAMIC_TYPE_TMP_BUFFER);
     if (tmpQ != NULL) {

Original file line number	Diff line number	Diff line change
`@@ -231,6 +231,7 @@ int wc_MakeDsaKey(WC_RNG rng, DsaKey dsa)`
`231`	`231`	`mp_clear(&dsa->y);`
`232`	`232`	`}`
`233`	`233`
	`234`	`+ ForceZero(cBuf, cSz);`
`234`	`235`	`#if defined(WOLFSSL_SMALL_STACK) && !defined(WOLFSSL_NO_MALLOC)`
`235`	`236`	`XFREE(cBuf, dsa->heap, DYNAMIC_TYPE_TMP_BUFFER);`
`236`	`237`	`if (tmpQ != NULL) {`