From: Pavel Filipenský <pfilipensky@samba.org>
Date: Wed, 27 Jul 2022 15:21:07 +0000 (+0200)
Subject: s3:libads: Zero memory in ads_change_trust_account_password()
X-Git-Tag: talloc-2.4.0~1326
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4df98ed05d4171d0d13bf6c45577cdeb03958f22;p=thirdparty%2Fsamba.git

s3:libads: Zero memory in ads_change_trust_account_password()

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---

diff --git a/source3/libads/util.c b/source3/libads/util.c
index 150da78fe88..a1e33fd3b33 100644
--- a/source3/libads/util.c
+++ b/source3/libads/util.c
@@ -107,6 +107,7 @@ ADS_STATUS ads_change_trust_account_password(ADS_STRUCT *ads, char *host_princip
 					       info);
 		return ADS_ERROR_NT(status);
 	}
+	talloc_keep_secret(new_pw_blob.data);
 	new_password = (const char *)new_pw_blob.data;
 
 	ret = kerberos_set_password(ads->auth.kdc_server, host_principal, password, host_principal, new_password, ads->auth.time_offset);