Use explicit_bzero(). With BSD auth these data have already been wiped when we reach those points but just in case.

1 files changed, 4 insertions, 4 deletions

diff --git a/greeter/greet.c b/greeter/greet.c
index 420f679..f07656a 100644
--- a/greeter/greet.c
+++ b/greeter/greet.c
@@ -125,8 +125,8 @@ GreetDone (
 	break;
     }
     if (done) {
-	bzero (data->name, NAME_LEN);
-	bzero (data->passwd, PASSWORD_LEN);
+	explicit_bzero (data->name, NAME_LEN);
+	explicit_bzero (data->passwd, PASSWORD_LEN);
     }
 }
 
@@ -338,8 +338,8 @@ greet_user_rtn GreetUser(
 	else
 	{
 	    FailedLogin (d, greet->name);
-	    bzero (greet->name, strlen(greet->name));
-	    bzero (greet->password, strlen(greet->password));
+	    explicit_bzero (greet->name, strlen(greet->name));
+	    explicit_bzero (greet->password, strlen(greet->password));
 	}
     }
     DeleteXloginResources (d, dpy);