From c2102893af3257a9215176d8cb9c5ee969f39f91 Mon Sep 17 00:00:00 2001
From: Hanno Becker <hanno.becker@arm.com>
Date: Wed, 25 Oct 2017 16:09:08 +0100
Subject: [PATCH] Zeroize stack before returning from mpi_fill_random

---
 library/bignum.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/library/bignum.c b/library/bignum.c
index f5130b4067..0a95607342 100644
--- a/library/bignum.c
+++ b/library/bignum.c
@@ -1884,6 +1884,7 @@ int mpi_fill_random( mpi *X, size_t size,
     MPI_CHK( mpi_read_binary( X, buf, size ) );
 
 cleanup:
+    polarssl_zeroize( buf, sizeof( buf ) );
     return( ret );
 }