From 4e7ade053e8ddc2527a00229e38fb68e5d3f7350 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 29 Jun 2026 15:46:52 +0200 Subject: [PATCH] keymat_v2: Explicitly clear key derived during EAP/PSK authentication --- src/libcharon/sa/ikev2/keymat_v2.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libcharon/sa/ikev2/keymat_v2.c b/src/libcharon/sa/ikev2/keymat_v2.c index 08fcdedc7..91c40ab3c 100644 --- a/src/libcharon/sa/ikev2/keymat_v2.c +++ b/src/libcharon/sa/ikev2/keymat_v2.c @@ -781,8 +781,8 @@ METHOD(keymat_v2_t, get_psk_sig, bool, failure: chunk_clear(&skp_ppk); + chunk_clear(&key); chunk_free(&octets); - chunk_free(&key); return success; }