krb5: always zero elastic storage
Elastic storage (returned from krb5_storage_emem()) often contains secret keys. Ensure memory is zeroed on free using memset_s() rather than memset().
This commit is contained in:
@@ -139,7 +139,7 @@ static void
|
||||
emem_free(krb5_storage *sp)
|
||||
{
|
||||
emem_storage *s = sp->data;
|
||||
memset(s->base, 0, s->len);
|
||||
memset_s(s->base, s->len, 0, s->len);
|
||||
free(s->base);
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user