From d00f318323177268872a1fa8bc140aa76979789d Mon Sep 17 00:00:00 2001
From: Lennart Poettering <lennart@poettering.net>
Date: Tue, 14 Apr 2020 15:43:01 +0200
Subject: [PATCH] user-record: securely erase pkcs#11 when assigned NULL too

---
 src/shared/user-record.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/shared/user-record.c b/src/shared/user-record.c
index 83d86f69e7..f6f67eabc0 100644
--- a/src/shared/user-record.c
+++ b/src/shared/user-record.c
@@ -706,7 +706,7 @@ static int dispatch_pkcs11_key_data(const char *name, JsonVariant *variant, Json
         int r;
 
         if (json_variant_is_null(variant)) {
-                k->data = mfree(k->data);
+                k->data = erase_and_free(k->data);
                 k->size = 0;
                 return 0;
         }