oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

krb5: use memset_s() in krb5_free_keyblock_contents()

Browse Source 
krb5_free_keyblock_contents() should use memset_s() to ensure that the key is
zero'd before freeing
This commit is contained in:
Luke Howard
2020-04-14 20:21:09 +10:00
parent baeebd4113
commit ed41592876
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
lib/krb5/keyblock.c
View File

@@ -63,7 +63,8 @@ krb5_free_keyblock_contents(krb5_context context,
{ {
if(keyblock) { if(keyblock) {
if (keyblock->keyvalue.data != NULL) if (keyblock->keyvalue.data != NULL)
memset(keyblock->keyvalue.data, 0, keyblock->keyvalue.length); memset_s(keyblock->keyvalue.data, keyblock->keyvalue.length,
0, keyblock->keyvalue.length);
krb5_data_free (&keyblock->keyvalue); krb5_data_free (&keyblock->keyvalue);
keyblock->keytype = KRB5_ENCTYPE_NULL; keyblock->keytype = KRB5_ENCTYPE_NULL;
} }