JehanneOS
/
newlib
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

* setpwd.cc (client_request_setpwd::serve): Explicitely erase password 

buffer content after usage.
This commit is contained in:
Corinna Vinschen 2008-12-15 17:39:21 +00:00
parent 8d12bd32cd
commit d08afb78d1
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
winsup/cygserver/ChangeLog
View File

@ -1,3 +1,8 @@
2008-12-15 Corinna Vinschen <corinna@vinschen.de>
* setpwd.cc (client_request_setpwd::serve): Explicitely erase password
buffer content after usage.
2008-11-26 Corinna Vinschen <corinna@vinschen.de>
* Makefile.in (OBJS): Add setpwd.o.

2
winsup/cygserver/setpwd.cc
View File

@ -90,6 +90,8 @@ client_request_setpwd::serve (transport_layer_base *const conn,
RtlAppendUnicodeStringToString (&key, &sid);
RtlInitUnicodeString (&data, _parameters.in.passwd);
status = LsaStorePrivateData (lsa, &key, data.Length ? &data : NULL);
if (data.Length)
memset (data.Buffer, 0, data.Length);
if (NT_SUCCESS (status))
error_code (0);
else