Wipe (some) secrets from memory after use

[tinc] / src / gcrypt / digest.c

diff --git a/src/gcrypt/digest.c b/src/gcrypt/digest.c
index 50446f6..cfea1f0 100644 (file)
--- a/src/gcrypt/digest.c
+++ b/src/gcrypt/digest.c
@@ -111,6 +111,10 @@ bool digest_open_by_nid(digest_t *digest, nid_t nid, size_t maclength) {
 }
 
 void digest_close(digest_t *digest) {
+       if(!digest) {
+               return;
+       }
+
        if(digest->hmac) {
                gcry_md_close(digest->hmac);
        }