From 57d9d97866cdb7d53a1666511d5eac606d685ca6 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn@cryptomilk.org>
Date: Mon, 3 Sep 2018 17:52:51 +0200
Subject: [PATCH] pki_mbedcrypto: Use explicit_bzero()

Signed-off-by: Andreas Schneider <asn@cryptomilk.org>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
(cherry picked from commit b6b5a61c97ff5d05337af59d7036b73924907e27)
---
 src/pki_mbedcrypto.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/pki_mbedcrypto.c b/src/pki_mbedcrypto.c
index fceacd80..534e375d 100644
--- a/src/pki_mbedcrypto.c
+++ b/src/pki_mbedcrypto.c
@@ -1046,7 +1046,7 @@ static ssh_string rsa_do_sign_hash(const unsigned char *digest,
     }
 
     ssh_string_fill(sig_blob, sig, slen);
-    memset(sig, 'd', slen);
+    explicit_bzero(sig, slen);
     SAFE_FREE(sig);
 
     return sig_blob;