fix(toxencryptsave): Wipe salt and passkey after usage.

Green-Sky · Green-Sky · commit 7cefa93cf297 · 2025-10-25T12:17:39.000+02:00
diff --git a/toxencryptsave/toxencryptsave.c b/toxencryptsave/toxencryptsave.c
@@ -55,6 +55,13 @@ struct Tox_Pass_Key {
 
 void tox_pass_key_free(Tox_Pass_Key *key)
 {
+    if (key == NULL) {
+        return;
+    }
+
+    /* wipe sensitive state */
+    crypto_memzero(key->salt, TOX_PASS_SALT_LENGTH);
+    crypto_memzero(key->key, TOX_PASS_KEY_LENGTH);
     free(key);
 }
 

Original file line number	Diff line number	Diff line change
`@@ -55,6 +55,13 @@ struct Tox_Pass_Key {`
`55`	`55`
`56`	`56`	`void tox_pass_key_free(Tox_Pass_Key *key)`
`57`	`57`	`{`
	`58`	`+ if (key == NULL) {`
	`59`	`+ return;`
	`60`	`+ }`
	`61`	`+`
	`62`	`+ /* wipe sensitive state */`
	`63`	`+ crypto_memzero(key->salt, TOX_PASS_SALT_LENGTH);`
	`64`	`+ crypto_memzero(key->key, TOX_PASS_KEY_LENGTH);`
`58`	`65`	`free(key);`
`59`	`66`	`}`
`60`	`67`