]> git.ipfire.org Git - thirdparty/openssh-portable.git/commit
upstream: f sshpkt functions fail, then password is not cleared
authordtucker@openbsd.org <dtucker@openbsd.org>
Fri, 27 May 2022 04:29:40 +0000 (04:29 +0000)
committerDarren Tucker <dtucker@dtucker.net>
Fri, 27 May 2022 04:59:17 +0000 (14:59 +1000)
commit2c334fd36f80cb91cc42e4b978b10aa35e0df236
treee71d1d59ef6192c4fb2d08289fa3d9dd3fe346c4
parent5d3a77f4c5ae774c6796387266503f52c7cdc7c2
upstream: f sshpkt functions fail, then password is not cleared

with freezero. Unconditionally call freezero to guarantee that password is
removed from RAM.

From tobias@ and c3h2_ctf via github PR#286, ok djm@

OpenBSD-Commit-ID: 6b093619c9515328e25b0f8093779c52402c89cd
auth2-passwd.c