From ed41592876c64c56b5e333abe3a86af1f5b7202d Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Tue, 14 Apr 2020 20:21:09 +1000
Subject: [PATCH] krb5: use memset_s() in krb5_free_keyblock_contents()

krb5_free_keyblock_contents() should use memset_s() to ensure that the key is
zero'd before freeing
---
 lib/krb5/keyblock.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/krb5/keyblock.c b/lib/krb5/keyblock.c
index abca3ee05..317bed382 100644
--- a/lib/krb5/keyblock.c
+++ b/lib/krb5/keyblock.c
@@ -63,7 +63,8 @@ krb5_free_keyblock_contents(krb5_context context,
 {
     if(keyblock) {
 	if (keyblock->keyvalue.data != NULL)
-	    memset(keyblock->keyvalue.data, 0, keyblock->keyvalue.length);
+	    memset_s(keyblock->keyvalue.data, keyblock->keyvalue.length,
+		     0, keyblock->keyvalue.length);
 	krb5_data_free (&keyblock->keyvalue);
 	keyblock->keytype = KRB5_ENCTYPE_NULL;
     }