Added guard code to avoid issue when decoding PEM but not keeping data.

[BearSSL] / src / mac / hmac_ct.c

diff --git a/src/mac/hmac_ct.c b/src/mac/hmac_ct.c
index 3237885..e1c1d80 100644 (file)
--- a/src/mac/hmac_ct.c
+++ b/src/mac/hmac_ct.c
@@ -150,6 +150,7 @@ br_hmac_outCT(const br_hmac_context *ctx,
         * Hash state is obtained whenever we reach a full block. This
         * is the result we want if and only if u == kz.
         */
+       memset(tmp2, 0, sizeof tmp2);
        for (u = 0; u < km; u ++) {
                uint32_t v;
                uint32_t d, e, x0, x1;