summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRicardo Mestre <mestre@cvs.openbsd.org>2021-10-23 19:08:49 +0000
committerRicardo Mestre <mestre@cvs.openbsd.org>2021-10-23 19:08:49 +0000
commit439a1feccb4bd0f5d7c058479a9b837b5eaf8593 (patch)
tree876f4b5bdb043f296503f14971b506df9ffe5ef6
parent717c58216ffb027855025d18636b23f6519831a7 (diff)
ensure that sensitive data is zeroed out from mem.
ok beck@
-rw-r--r--libexec/login_reject/login_reject.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/libexec/login_reject/login_reject.c b/libexec/login_reject/login_reject.c
index f3e3499b92b..7d67dc81099 100644
--- a/libexec/login_reject/login_reject.c
+++ b/libexec/login_reject/login_reject.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: login_reject.c,v 1.17 2018/04/26 12:42:51 guenther Exp $ */
+/* $OpenBSD: login_reject.c,v 1.18 2021/10/23 19:08:48 mestre Exp $ */
/*-
* Copyright (c) 1995 Berkeley Software Design, Inc. All rights reserved.
@@ -119,6 +119,7 @@ main(int argc, char *argv[])
readpassphrase("Password:", passbuf, sizeof(passbuf), 0);
crypt_checkpass("password", NULL);
+ explicit_bzero(passbuf, sizeof(passbuf));
fprintf(back, BI_REJECT "\n");
exit(1);