From bbbd15dd5c13d96ec09384a6e33db9220e3e3f8f Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 11 Jul 2023 11:44:11 +0200
Subject: [PATCH] pkcs12: Make sure to wipe potentially decrypted PKCS#7 data

---
 src/libstrongswan/plugins/pkcs12/pkcs12_decode.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c b/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
index 6f8f06f27..bed02cc42 100644
--- a/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
+++ b/src/libstrongswan/plugins/pkcs12/pkcs12_decode.c
@@ -307,10 +307,10 @@ static bool parse_authenticated_safe(private_pkcs12_t *this, chunk_t blob)
 				if (!parse_safe_contents(this, parser->get_level(parser)+1,
 										 data))
 				{
-					chunk_free(&data);
+					chunk_clear(&data);
 					goto end;
 				}
-				chunk_free(&data);
+				chunk_clear(&data);
 				break;
 			}
 		}