From: Pavel Filipenský <pfilipensky@samba.org>
Date: Wed, 26 Nov 2025 09:34:02 +0000 (+0100)
Subject: libcli/auth: Zero out password in smbencrypt.c
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f88923915269eb4d80e65d89fc6332c20c195985;p=thirdparty%2Fsamba.git

libcli/auth: Zero out password in smbencrypt.c

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Pavel Filipensky <pfilipensky@samba.org>
Autobuild-Date(master): Mon Dec  8 18:21:45 UTC 2025 on atb-devel-224
---

diff --git a/libcli/auth/smbencrypt.c b/libcli/auth/smbencrypt.c
index 03195855e92..b130c0abe34 100644
--- a/libcli/auth/smbencrypt.c
+++ b/libcli/auth/smbencrypt.c
@@ -1472,7 +1472,7 @@ bool decode_pw_buffer(TALLOC_CTX *ctx,
 				   new_password.length,
 				   pp_new_pwrd,
 				   new_pw_len);
-	data_blob_free(&new_password);
+	data_blob_clear_free(&new_password);
 	if (!ok) {
 		DBG_ERR("Failed to convert incoming password\n");
 		return false;