]> git.ipfire.org Git - thirdparty/util-linux.git/commit
vipw: use explicit_bzero() to clear buffer after copy
authorSami Kerola <kerolasa@iki.fi>
Sat, 29 Jul 2017 16:19:47 +0000 (17:19 +0100)
committerSami Kerola <kerolasa@iki.fi>
Sat, 5 Aug 2017 08:58:25 +0000 (09:58 +0100)
commit46df3aaae801b8d2b52b99356cd737e6e11a4e3c
tree4b35ba9e67ea9c3341d393ee93492c3070bf6b29
parent67663979328054eb9ce4f38166ee34b0dd31db7c
vipw: use explicit_bzero() to clear buffer after copy

This should make leaking end of /etc/shadow file more unlikely.

Notice that there is now way to tell to editors they should ensure none it
does not leak any buffers, drop cores, and so on, when editing sensitive
data.  In short this change is addressing the issue only partially.

Signed-off-by: Sami Kerola <kerolasa@iki.fi>
login-utils/vipw.c