]> eyrie.org Git - kerberos/krb5-strength.git/commit
Use explicit_bzero to overwrite passwords
authorRuss Allbery <eagle@eyrie.org>
Sat, 16 May 2020 22:42:42 +0000 (15:42 -0700)
committerRuss Allbery <eagle@eyrie.org>
Sat, 16 May 2020 22:42:42 +0000 (15:42 -0700)
commit6f2062c7b82413b0f74ae162127fa9f1c606bbeb
treee54d6fc2ec997461ae0bc44d9614b477e5ecc460
parentcc5ee2bf954c10fa30cafd58af62bc9c3fb6d986
Use explicit_bzero to overwrite passwords

Use explicit_bzero instead of memset, where available, to overwrite
copies of passwords before freeing memory.  This reduces the lifetime
of passwords in memory.
NEWS
plugin/principal.c
plugin/sqlite.c