oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

lib/gssapi/krb5: clear temporary buffer with cleartext data.

Browse Source 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
This commit is contained in:
Stefan Metzmacher
2015-06-18 14:06:57 +02:00
committed by Andrew Bartlett
parent e33e47650a
commit 5f79ac2bb9
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
lib/gssapi/krb5/arcfour.c
View File

@@ -149,6 +149,7 @@ arcfour_mic_cksum(krb5_context context,
0, 0,
ptr, len, ptr, len,
&CKSUM); &CKSUM);
memset(ptr, 0, len);
free(ptr); free(ptr);
if (ret == 0) { if (ret == 0) {
memcpy(sgn_cksum, CKSUM.checksum.data, sgn_cksum_sz); memcpy(sgn_cksum, CKSUM.checksum.data, sgn_cksum_sz);