Use explicit_bzero(). With BSD auth these data have already been

wiped when we reach those points but just in case.
This commit is contained in:
matthieu 2016-11-06 13:30:15 +00:00
parent cdddca9b4f
commit 4a2df54825

View File

@ -125,8 +125,8 @@ GreetDone (
break;
}
if (done) {
bzero (data->name, NAME_LEN);
bzero (data->passwd, PASSWORD_LEN);
explicit_bzero (data->name, NAME_LEN);
explicit_bzero (data->passwd, PASSWORD_LEN);
}
}
@ -338,8 +338,8 @@ greet_user_rtn GreetUser(
else
{
FailedLogin (d, greet->name);
bzero (greet->name, strlen(greet->name));
bzero (greet->password, strlen(greet->password));
explicit_bzero (greet->name, strlen(greet->name));
explicit_bzero (greet->password, strlen(greet->password));
}
}
DeleteXloginResources (d, dpy);