From f88923915269eb4d80e65d89fc6332c20c195985 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Pavel=20Filipensk=C3=BD?= Date: Wed, 26 Nov 2025 10:34:02 +0100 Subject: [PATCH] libcli/auth: Zero out password in smbencrypt.c MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Pavel Filipenský Reviewed-by: Andreas Schneider Autobuild-User(master): Pavel Filipensky Autobuild-Date(master): Mon Dec 8 18:21:45 UTC 2025 on atb-devel-224 --- libcli/auth/smbencrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libcli/auth/smbencrypt.c b/libcli/auth/smbencrypt.c index 03195855e92..b130c0abe34 100644 --- a/libcli/auth/smbencrypt.c +++ b/libcli/auth/smbencrypt.c @@ -1472,7 +1472,7 @@ bool decode_pw_buffer(TALLOC_CTX *ctx, new_password.length, pp_new_pwrd, new_pw_len); - data_blob_free(&new_password); + data_blob_clear_free(&new_password); if (!ok) { DBG_ERR("Failed to convert incoming password\n"); return false; -- 2.47.3