lib: use memzero where applicable
Use memzero when operating in a buffer of known size to clear all bytes and avoid leaking the size of the stored data.
This commit is contained in:
		
				
					committed by
					
						
						Iker Pedrosa
					
				
			
			
				
	
			
			
			
						parent
						
							e74bfe2c75
						
					
				
				
					commit
					8e53db927a
				
			@@ -216,7 +216,7 @@ static void catch_signals (unused int sig)
 | 
			
		||||
		sleep (2);
 | 
			
		||||
		(void) puts (_("Login incorrect"));
 | 
			
		||||
	}
 | 
			
		||||
	strzero (pass);
 | 
			
		||||
	memzero (pass, sizeof pass);
 | 
			
		||||
	(void) alarm (0);
 | 
			
		||||
	(void) signal (SIGALRM, SIG_DFL);
 | 
			
		||||
	environ = newenvp;	/* make new environment active */
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user