From 2a915cd1e3eccca468364fea4fbe58e0bb8626f6 Mon Sep 17 00:00:00 2001 From: Mounir IDRASSI Date: Tue, 14 Jul 2020 00:40:03 +0200 Subject: clear bootParams variable that may contain sensitive information when halting the system in case of fatal error (fix Github issue #21) --- DcsInt/DcsInt.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/DcsInt/DcsInt.c b/DcsInt/DcsInt.c index b7e392f..45a611a 100644 --- a/DcsInt/DcsInt.c +++ b/DcsInt/DcsInt.c @@ -97,6 +97,10 @@ CleanSensitiveData() if (SecRegionData != NULL) { MEM_BURN(SecRegionData, SecRegionSize); } + + if (bootParams != NULL) { + MEM_BURN(bootParams, sizeof(*bootParams)); + } if (gAutoPassword != NULL) { MEM_BURN(gAutoPassword, MAX_PASSWORD); -- cgit v1.2.3