auth:creds: Keep password secret in cmdline_get_userpassword()

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15893

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
(cherry picked from commit 34482f4ad014a09c84b484097a8d03dfec4f6512)

diff --git a/auth/credentials/credentials_cmdline.c b/auth/credentials/credentials_cmdline.c
index c8c7c183c2213eb1f21984289ac76eca5c3c2d5c..e9cdc80d52a61fab14b3af639a2975f54867bd4a 100644 (file)
--- a/auth/credentials/credentials_cmdline.c
+++ b/auth/credentials/credentials_cmdline.c
@@ -46,6 +46,7 @@ static const char *cmdline_get_userpassword(struct cli_credentials *creds)
                goto fail;
        }
        talloc_set_name_const(ret, __location__);
+       talloc_keep_secret(ret);
 fail:
        ZERO_STRUCT(pwd);
        TALLOC_FREE(frame);