release TLSPRF key handle

qmuntal · qmuntal · commit 7258c76b95ef · 2025-02-11T16:02:26.000Z
diff --git a/cng/tls1prf.go b/cng/tls1prf.go
@@ -48,6 +48,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
 	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
 		return err
 	}
+	defer bcrypt.DestroyKey(kh)
 
 	buffers := make([]bcrypt.Buffer, 0, 3)
 	if len(label) > 0 {

Original file line number	Diff line number	Diff line change
`@@ -48,6 +48,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {`
`48`	`48`	`if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {`
`49`	`49`	`return err`
`50`	`50`	`}`
	`51`	`+ defer bcrypt.DestroyKey(kh)`
`51`	`52`
`52`	`53`	`buffers := make([]bcrypt.Buffer, 0, 3)`
`53`	`54`	`if len(label) > 0 {`