From: Andreas Schneider <asn@samba.org>
Date: Tue, 30 Oct 2018 16:08:35 +0000 (+0100)
Subject: auth:gensec: Make sure we zero the checksum after use
X-Git-Tag: talloc-2.2.0~287
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b451168d72ec0026dd4ce36a3f2913a5842ba84d;p=thirdparty%2Fsamba.git

auth:gensec: Make sure we zero the checksum after use

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
---

diff --git a/auth/gensec/schannel.c b/auth/gensec/schannel.c
index 364a0fcc186..441801bac47 100644
--- a/auth/gensec/schannel.c
+++ b/auth/gensec/schannel.c
@@ -347,6 +347,8 @@ static NTSTATUS netsec_incoming_packet(struct schannel_state *state,
 
 	netsec_do_seq_num(state, checksum, checksum_length, seq_num);
 
+	ZERO_ARRAY(checksum);
+
 	ret = memcmp(seq_num, sig->data+8, 8);
 	if (ret != 0) {
 		dump_data_pw("calc seq num:", seq_num, 8);