zeroize swap trailer key buffer

danielinux · danielinux · commit e855c591db21 · 2026-04-08T19:53:50.000+02:00
F/1890
diff --git a/src/update_flash.c b/src/update_flash.c
@@ -525,6 +525,10 @@ static int RAMFUNCTION wolfBoot_swap_and_final_erase(int resume)
 #endif
     hal_flash_lock();
 
+#ifdef EXT_ENCRYPTED
+    wolfBoot_zeroize(tmpBuffer, sizeof(tmpBuffer));
+#endif
+
     return 0;
 }
 #ifdef __CCRX__
