From 0480989a730342076213b8d8756513b26601eef7 Mon Sep 17 00:00:00 2001
From: Andrew Zaborowski <andrew.zaborowski@intel.com>
Date: Thu, 13 Aug 2020 02:53:32 +0200
Subject: [PATCH] eap-wsc: Zero a temporary buffer before freeing

---
 src/eap-wsc.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/eap-wsc.c b/src/eap-wsc.c
index ccb52979..ca915471 100644
--- a/src/eap-wsc.c
+++ b/src/eap-wsc.c
@@ -1157,11 +1157,13 @@ static bool load_hexencoded(struct l_settings *settings, const char *key,
 		return false;
 
 	if (decoded_len != len) {
+		explicit_bzero(decoded, decoded_len);
 		l_free(decoded);
 		return false;
 	}
 
 	memcpy(to, decoded, len);
+	explicit_bzero(decoded, decoded_len);
 	l_free(decoded);
 
 	return true;