From f86739e3abd63ba0b7ba632d796968fec9fa2f8f Mon Sep 17 00:00:00 2001 From: Andreas Schneider Date: Thu, 7 Aug 2025 13:48:26 +0200 Subject: [PATCH] s3:utils: Keep password secret in ntlm_auth get_password() BUG: https://bugzilla.samba.org/show_bug.cgi?id=15893 Signed-off-by: Andreas Schneider Reviewed-by: Alexander Bokovoy --- source3/utils/ntlm_auth.c | 1 + 1 file changed, 1 insertion(+) diff --git a/source3/utils/ntlm_auth.c b/source3/utils/ntlm_auth.c index d5ae7c85b22..a424990baa8 100644 --- a/source3/utils/ntlm_auth.c +++ b/source3/utils/ntlm_auth.c @@ -254,6 +254,7 @@ static const char *get_password(struct cli_credentials *credentials) manage_squid_request(NUM_HELPER_MODES /* bogus */, NULL, state, manage_gensec_get_pw_request, (void **)&password); talloc_steal(credentials, password); + talloc_keep_secret(password); TALLOC_FREE(frame); return password; } -- 2.47.3