Merge pull request #317 from sjscymru/fix-hdfk-buffer-overflow

fdesbiens · web-flow · commit 84b920fc65d6 · 2025-09-29T11:24:13.000+01:00
Fix HKDF implementation to prevent buffer overrun when compiled with NX_SECURE_KEY_CLEAR
diff --git a/crypto_libraries/src/nx_crypto_hkdf.c b/crypto_libraries/src/nx_crypto_hkdf.c
@@ -172,7 +172,7 @@ UINT status;
 
     if(hmac_method)
     {
-        status = hmac_method -> nx_crypto_cleanup(hmac_method);
+        status = hmac_method -> nx_crypto_cleanup(hkdf->nx_crypto_hmac_metadata);
 
         if (status != NX_CRYPTO_SUCCESS)
         {

Original file line number	Diff line number	Diff line change
`@@ -172,7 +172,7 @@ UINT status;`
`172`	`172`
`173`	`173`	`if(hmac_method)`
`174`	`174`	`{`
`175`		`- status = hmac_method -> nx_crypto_cleanup(hmac_method);`
	`175`	`+ status = hmac_method -> nx_crypto_cleanup(hkdf->nx_crypto_hmac_metadata);`
`176`	`176`
`177`	`177`	`if (status != NX_CRYPTO_SUCCESS)`
`178`	`178`	`{`