Use freezero() rather than OPENSSL_clear_free().

1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libcrypto/cms/cms_kari.c b/src/lib/libcrypto/cms/cms_kari.c
index ca3e6d75de..04bca9dce5 100644
--- a/src/lib/libcrypto/cms/cms_kari.c
+++ b/src/lib/libcrypto/cms/cms_kari.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: cms_kari.c,v 1.9 2019/08/11 10:43:24 jsing Exp $ */
+/* $OpenBSD: cms_kari.c,v 1.10 2019/08/11 10:43:57 jsing Exp $ */
 /*
  * Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  * project.
@@ -296,7 +296,7 @@ CMS_RecipientInfo_kari_decrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri,
         if (!cms_kek_cipher(&cek, &ceklen, enckey, enckeylen, ri->d.kari, 0))
                 goto err;
         ec = cms->d.envelopedData->encryptedContentInfo;
-        OPENSSL_clear_free(ec->key, ec->keylen);
+        freezero(ec->key, ec->keylen);
         ec->key = cek;
         ec->keylen = ceklen;
         cek = NULL;