Use explicit_bzero(). With BSD auth these data have already been

wiped when we reach those points but just in case.
This commit is contained in:
matthieu 2016-11-06 13:30:15 +00:00
parent cdddca9b4f
commit 4a2df54825

View File

@ -125,8 +125,8 @@ GreetDone (
break; break;
} }
if (done) { if (done) {
bzero (data->name, NAME_LEN); explicit_bzero (data->name, NAME_LEN);
bzero (data->passwd, PASSWORD_LEN); explicit_bzero (data->passwd, PASSWORD_LEN);
} }
} }
@ -338,8 +338,8 @@ greet_user_rtn GreetUser(
else else
{ {
FailedLogin (d, greet->name); FailedLogin (d, greet->name);
bzero (greet->name, strlen(greet->name)); explicit_bzero (greet->name, strlen(greet->name));
bzero (greet->password, strlen(greet->password)); explicit_bzero (greet->password, strlen(greet->password));
} }
} }
DeleteXloginResources (d, dpy); DeleteXloginResources (d, dpy);