Clear buffer in PEM_write_bio

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5814)

diff --git a/crypto/pem/pem_lib.c b/crypto/pem/pem_lib.c
index 830099295caeb18e4aa865b90573f692b87c0940..6e66e9d3e927112112deffda2505d097f999978f 100644 (file)
--- a/crypto/pem/pem_lib.c
+++ b/crypto/pem/pem_lib.c
@@ -661,7 +661,7 @@ int PEM_write_bio(BIO *bp, const char *name, const char *header,
     if (retval == 0)
         PEMerr(PEM_F_PEM_WRITE_BIO, reason);
     EVP_ENCODE_CTX_free(ctx);
-    OPENSSL_free(buf);
+    OPENSSL_clear_free(buf, PEM_BUFSIZE * 8);
     return retval;
 }