summaryrefslogtreecommitdiffstats
path: root/lib/libutil
diff options
context:
space:
mode:
authordoug <doug@openbsd.org>2014-08-25 07:50:25 +0000
committerdoug <doug@openbsd.org>2014-08-25 07:50:25 +0000
commit8fbd7fcb8d331194584ef4043b7f4f92ada377bb (patch)
treef0df72951716ad86cd3ad90b30dadead7be9c4bf /lib/libutil
parentDisplay usage on 2 lines. (diff)
downloadwireguard-openbsd-8fbd7fcb8d331194584ef4043b7f4f92ada377bb.tar.xz
wireguard-openbsd-8fbd7fcb8d331194584ef4043b7f4f92ada377bb.zip
Delete secret or secret-derived data with explicit_bzero.
concept ok deraadt@ diff looks ok tedu@
Diffstat (limited to 'lib/libutil')
-rw-r--r--lib/libutil/check_expire.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libutil/check_expire.c b/lib/libutil/check_expire.c
index 8e23a67fb74..cc141311dad 100644
--- a/lib/libutil/check_expire.c
+++ b/lib/libutil/check_expire.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: check_expire.c,v 1.9 2013/04/29 00:19:19 okan Exp $ */
+/* $OpenBSD: check_expire.c,v 1.10 2014/08/25 07:50:25 doug Exp $ */
/*
* Copyright (c) 1997 Berkeley Software Design, Inc. All rights reserved.
@@ -129,7 +129,7 @@ login_check_expire(FILE *back, struct passwd *pwd, char *class, int lastchance)
npwd = pw_dup(pwd);
npwd->pw_change = 1;
p = pwd_update(npwd, pwd);
- memset(npwd->pw_passwd, 0,
+ explicit_bzero(npwd->pw_passwd,
strlen(npwd->pw_passwd));
free(npwd);
if (p != NULL) {