From 84d5e156ffb0fc9ae2bf0e7439bccb9aab40be7f Mon Sep 17 00:00:00 2001
From: =?utf8?q?Pavel=20Filipensk=C3=BD?= <pfilipensky@samba.org>
Date: Thu, 11 Aug 2022 10:49:01 +0200
Subject: [PATCH] s3:passdb: Zero password in fetch_ldap_pw()
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Signed-off-by: Pavel Filipenský <pfilipensky@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
---
 source3/passdb/secrets.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source3/passdb/secrets.c b/source3/passdb/secrets.c
index d2e2b7511ad..cd85807e8c1 100644
--- a/source3/passdb/secrets.c
+++ b/source3/passdb/secrets.c
@@ -386,7 +386,7 @@ bool fetch_ldap_pw(char **dn, char** pw)
 
 	if (*pw == NULL || size == 0 || (*pw)[size-1] != '\0') {
 		DBG_ERR("No valid password for %s\n", *dn);
-		SAFE_FREE(*pw);
+		BURN_FREE_STR(*pw);
 		SAFE_FREE(*dn);
 		return false;
 	}
-- 
2.47.3