From 2d295d0d989536eaef2318787cc6d33aed495cb7 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Wed, 5 Oct 2022 11:09:03 +0200 Subject: [PATCH] Fix severe bug zeroing outside memory. Signed-off-by: Pol Henarejos --- src/fido/credential.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/fido/credential.c b/src/fido/credential.c index e970c02..889c3ac 100644 --- a/src/fido/credential.c +++ b/src/fido/credential.c @@ -303,7 +303,7 @@ int credential_derive_hmac_key(const uint8_t *cred_id, size_t cred_id_len, uint8 } int credential_derive_chacha_key(uint8_t *outk) { - memset(outk, 0, 64); + memset(outk, 0, 32); int r = 0; if ((r = load_keydev(outk)) != 0) return r;