Merge pull request #89 from microsoft/ms-go1.23-ff

qmuntal · web-flow · commit fea4f38f45ec · 2025-02-11T16:14:11.000Z
[ms-go1.23-support] Release TLSPRF key handle
diff --git a/cng/tls1prf.go b/cng/tls1prf.go
@@ -48,6 +48,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {
 	if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {
 		return err
 	}
+	defer bcrypt.DestroyKey(kh)
 
 	buffers := make([]bcrypt.Buffer, 0, 3)
 	if len(label) > 0 {

Original file line number	Diff line number	Diff line change
`@@ -48,6 +48,7 @@ func TLS1PRF(result, secret, label, seed []byte, h func() hash.Hash) error {`
`48`	`48`	`if err := bcrypt.GenerateSymmetricKey(alg, &kh, nil, secret, 0); err != nil {`
`49`	`49`	`return err`
`50`	`50`	`}`
	`51`	`+ defer bcrypt.DestroyKey(kh)`
`51`	`52`
`52`	`53`	`buffers := make([]bcrypt.Buffer, 0, 3)`
`53`	`54`	`if len(label) > 0 {`