Merge commit from fork

qmuntal · web-flow · commit f49c8e1379ea · 2025-02-11T15:46:40.000Z
Destroy key handle when exiting cng.TLS1PRF
diff --git a/cng/tls1prf.go b/cng/tls1prf.go
@@ -44,6 +44,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
 	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
 		return err
 	}
+	defer bcrypt.DestroyKey(kh)
 
 	buffers := make([]bcrypt.Buffer, 0, 3)
 	if len(label) > 0 {

Original file line number	Diff line number	Diff line change
`@@ -44,6 +44,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {`
`44`	`44`	`if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {`
`45`	`45`	`return err`
`46`	`46`	`}`
	`47`	`+ defer bcrypt.DestroyKey(kh)`
`47`	`48`
`48`	`49`	`buffers := make([]bcrypt.Buffer, 0, 3)`
`49`	`50`	`if len(label) > 0 {`