From 5f79ac2bb989fd29cd52447d44b6ac7eddb726f1 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 18 Jun 2015 14:06:57 +0200 Subject: [PATCH] lib/gssapi/krb5: clear temporary buffer with cleartext data. Signed-off-by: Stefan Metzmacher --- lib/gssapi/krb5/arcfour.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/gssapi/krb5/arcfour.c b/lib/gssapi/krb5/arcfour.c index f5e41e405..5cd1fe3b9 100644 --- a/lib/gssapi/krb5/arcfour.c +++ b/lib/gssapi/krb5/arcfour.c @@ -149,6 +149,7 @@ arcfour_mic_cksum(krb5_context context, 0, ptr, len, &CKSUM); + memset(ptr, 0, len); free(ptr); if (ret == 0) { memcpy(sgn_cksum, CKSUM.checksum.data, sgn_cksum_sz);