krb5: always zero elastic storage
Elastic storage (returned from krb5_storage_emem()) often contains secret keys. Ensure memory is zeroed on free using memset_s() rather than memset().
This commit is contained in:
@@ -139,7 +139,7 @@ static void
|
|||||||
emem_free(krb5_storage *sp)
|
emem_free(krb5_storage *sp)
|
||||||
{
|
{
|
||||||
emem_storage *s = sp->data;
|
emem_storage *s = sp->data;
|
||||||
memset(s->base, 0, s->len);
|
memset_s(s->base, s->len, 0, s->len);
|
||||||
free(s->base);
|
free(s->base);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user