diff options
| author | Doug Hogan <doug@cvs.openbsd.org> | 2014-08-25 07:50:27 +0000 |
|---|---|---|
| committer | Doug Hogan <doug@cvs.openbsd.org> | 2014-08-25 07:50:27 +0000 |
| commit | 3ce4bc0c280ae5c7531019bcad5a537825322a3c (patch) | |
| tree | a710ec3b6dfae01df1435cb8cf460b5545d9edd9 /usr.sbin/ldapd/ldapd.c | |
| parent | f18e11632908ef2c093163862bc584b52fe13a54 (diff) | |
Delete secret or secret-derived data with explicit_bzero.
concept ok deraadt@
diff looks ok tedu@
Diffstat (limited to 'usr.sbin/ldapd/ldapd.c')
| -rw-r--r-- | usr.sbin/ldapd/ldapd.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/ldapd/ldapd.c b/usr.sbin/ldapd/ldapd.c index 94c039f913f..4dfd3557fe5 100644 --- a/usr.sbin/ldapd/ldapd.c +++ b/usr.sbin/ldapd/ldapd.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ldapd.c,v 1.10 2013/11/02 13:31:51 deraadt Exp $ */ +/* $OpenBSD: ldapd.c,v 1.11 2014/08/25 07:50:26 doug Exp $ */ /* * Copyright (c) 2009, 2010 Martin Hedenfalk <martin@bzero.se> @@ -298,7 +298,7 @@ ldapd_auth_classful(char *name, char *password) auth_setitem(as, AUTHV_SERVICE, "response"); auth_setdata(as, "", 1); auth_setdata(as, password, strlen(password) + 1); - memset(password, 0, strlen(password)); + explicit_bzero(password, strlen(password)); } else as = NULL; |