diff options
| author | Christian Göttsche <cgzones@googlemail.com> | 2024-01-17 15:34:05 +0100 |
|---|---|---|
| committer | Dmitry V. Levin <ldv@strace.io> | 2024-01-21 08:00:00 +0000 |
| commit | 42a8f233f5e8694995e19aead3f0d589fd75aaa8 (patch) | |
| tree | bb0440b18187499d7d2cd302d77c51c39f93c0c6 | |
| parent | 1a189b090270cf930b62ca005ad7e287e12fe04c (diff) | |
| download | pam-42a8f233f5e8694995e19aead3f0d589fd75aaa8.tar.gz pam-42a8f233f5e8694995e19aead3f0d589fd75aaa8.tar.bz2 pam-42a8f233f5e8694995e19aead3f0d589fd75aaa8.zip | |
pam_userdb: cleanse crypt data
Clease the crypt data to avoid any potential information leakage.
| -rw-r--r-- | modules/pam_userdb/pam_userdb.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/pam_userdb/pam_userdb.c b/modules/pam_userdb/pam_userdb.c index 7e1407f4..3bcb4c87 100644 --- a/modules/pam_userdb/pam_userdb.c +++ b/modules/pam_userdb/pam_userdb.c @@ -309,6 +309,7 @@ user_lookup (pam_handle_t *pamh, const char *database, const char *cryptmode, } } #ifdef HAVE_CRYPT_R + pam_overwrite_object(cdata); free(cdata); #endif } |