From 1e560deff8c37164eb7496e7d87aa7b30de80398 Mon Sep 17 00:00:00 2001
From: wolfbeast <mcwerewolf@wolfbeast.com>
Date: Wed, 17 Jul 2019 01:31:34 +0200
Subject: Don't unnecessarily strip leading 0's from key material during PKCS11
 import.

---
 security/nss/lib/softoken/pkcs11c.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'security/nss/lib/softoken/pkcs11c.c')

diff --git a/security/nss/lib/softoken/pkcs11c.c b/security/nss/lib/softoken/pkcs11c.c
index 7eec3d7ee..884702cc1 100644
--- a/security/nss/lib/softoken/pkcs11c.c
+++ b/security/nss/lib/softoken/pkcs11c.c
@@ -7568,7 +7568,7 @@ NSC_DeriveKey(CK_SESSION_HANDLE hSession,
 
             rv = ECDH_Derive(&ecPoint, &privKey->u.ec.ecParams, &ecScalar,
                              withCofactor, &tmp);
-            PORT_Free(ecScalar.data);
+            PORT_ZFree(ecScalar.data, ecScalar.len);
             ecScalar.data = NULL;
             if (privKey != sourceKey->objectInfo) {
                 nsslowkey_DestroyPrivateKey(privKey);
-- 
cgit v1.2.3