* scandir.cc (scandir): Assume namelist is always valid, per POSIX.

(CID 60021).
	* sec_auth.cc (cygwin_logon_user): Securely erase password copy.
	(lsaprivkeyauth): Avoid trying to dereference data if no key is stored
	in the registry (CID 60122).  Securely erase passwords after usage.
This commit is contained in:
Corinna Vinschen
2014-05-20 10:21:34 +00:00
parent d7dd11b8f3
commit 51a895f86d
3 changed files with 48 additions and 29 deletions

View File

@@ -1,6 +1,6 @@
/* scandir.cc
Copyright 1998, 1999, 2000, 2001, 2003, 2005 Red Hat, Inc.
Copyright 1998, 1999, 2000, 2001, 2003, 2005, 2014 Red Hat, Inc.
Written by Corinna Vinschen <corinna.vinschen@cityweb.de>
@@ -87,7 +87,6 @@ scandir (const char *dir,
closedir (dirp);
qsort (nl, count, sizeof *nl, (int (*)(const void *, const void *)) compar);
if (namelist)
*namelist = nl;
*namelist = nl;
return count;
}