]> eyrie.org Git - kerberos/krb5-strength.git/commit
Wipe password copies before freeing them
authorRuss Allbery <eagle@eyrie.org>
Thu, 6 Mar 2014 19:45:24 +0000 (11:45 -0800)
committerRuss Allbery <eagle@eyrie.org>
Thu, 6 Mar 2014 19:45:24 +0000 (11:45 -0800)
commitcb116a18a5143706d25ec8105fa74d6a26c14b39
tree0e90382ce5a5ecd744d3188004197a911b69556e
parent1f538914110dfa3464b8568e09d88446cfb60e37
Wipe password copies before freeing them

We make a copy of the user's password in several places when doing
checks for passwords based on the user's principal.  Be sure to
wipe those copies with memset before freeing them.
plugin/principal.c