Clean up resumption master secret in SSL_SESSION_free()

ok jsing

diff --git a/lib/libssl/ssl_sess.c b/lib/libssl/ssl_sess.c
index 45c6ddb..39e8b33 100644 (file)
--- a/lib/libssl/ssl_sess.c
+++ b/lib/libssl/ssl_sess.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_sess.c,v 1.118 2022/10/02 16:36:41 jsing Exp $ */
+/* $OpenBSD: ssl_sess.c,v 1.119 2022/10/20 15:21:22 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -772,6 +772,8 @@ SSL_SESSION_free(SSL_SESSION *ss)
        free(ss->tlsext_ecpointformatlist);
        free(ss->tlsext_supportedgroups);
 
+       tls13_secret_cleanup(&ss->resumption_master_secret);
+
        freezero(ss, sizeof(*ss));
 }