Skip to content

Commit b348f87

Browse files
committed
explicitely bzero buffer after checking password
1 parent 218c6ba commit b348f87

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

bsdauth.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,7 @@ void run_pw_backend_child(void) {
4040
break;
4141
}
4242
bool success = auth_userokay((char *)pwent->pw_name, NULL, "swaylock", buf);
43+
explicit_bzero(buf, strlen(buf));
4344
if (!write_comm_reply(success)) {
4445
exit(EXIT_FAILURE);
4546
}

0 commit comments

Comments
 (0)