emo/shadow
1
0
Fork 0
Code Issues Pull Requests Packages Releases Activity

* lib/pwio.c, lib/shadowio.c, lib/groupio.c, lib/sgroupio.c: Fill

Browse Source 
the password fields with zeros before they are freed.
This commit is contained in:
nekral-guest 2009-04-20 11:29:17 +00:00
parent bf66861e3f
commit 2ce68e8aec
5 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
ChangeLog
View File

@ -1,3 +1,8 @@
2009-04-20 Nicolas François <nicolas.francois@centraliens.net>
* lib/pwio.c, lib/shadowio.c, lib/groupio.c, lib/sgroupio.c: Fill
the password fields with zeros before they are freed.
2009-04-19 Changwoo Ryu <cwryu@debian.org> 2009-04-19 Changwoo Ryu <cwryu@debian.org>
* po/ko.po: Updated Korean translation. * po/ko.po: Updated Korean translation.

3
lib/groupio.c
View File

@ -3,7 +3,7 @@
* Copyright (c) 1996 - 2000, Marek Michałkiewicz * Copyright (c) 1996 - 2000, Marek Michałkiewicz
* Copyright (c) 2001 , Michał Moskal * Copyright (c) 2001 , Michał Moskal
* Copyright (c) 2005 , Tomasz Kłoczko * Copyright (c) 2005 , Tomasz Kłoczko
* Copyright (c) 2007 - 2008, Nicolas François * Copyright (c) 2007 - 2009, Nicolas François
* All rights reserved. * All rights reserved.
* *
* Redistribution and use in source and binary forms, with or without * Redistribution and use in source and binary forms, with or without
@ -60,6 +60,7 @@ static void group_free (void *ent)
struct group *gr = ent; struct group *gr = ent;
free (gr->gr_name); free (gr->gr_name);
memzero (gr->gr_passwd, strlen (gr->gr_passwd));
free (gr->gr_passwd); free (gr->gr_passwd);
while (*(gr->gr_mem)) { while (*(gr->gr_mem)) {
free (*(gr->gr_mem)); free (*(gr->gr_mem));

3
lib/pwio.c
View File

@ -3,7 +3,7 @@
* Copyright (c) 1996 - 2000, Marek Michałkiewicz * Copyright (c) 1996 - 2000, Marek Michałkiewicz
* Copyright (c) 2001 , Michał Moskal * Copyright (c) 2001 , Michał Moskal
* Copyright (c) 2003 - 2005, Tomasz Kłoczko * Copyright (c) 2003 - 2005, Tomasz Kłoczko
* Copyright (c) 2007 - 2008, Nicolas François * Copyright (c) 2007 - 2009, Nicolas François
* All rights reserved. * All rights reserved.
* *
* Redistribution and use in source and binary forms, with or without * Redistribution and use in source and binary forms, with or without
@ -54,6 +54,7 @@ static void passwd_free (void *ent)
struct passwd *pw = ent; struct passwd *pw = ent;
free (pw->pw_name); free (pw->pw_name);
memzero (pw->pw_passwd, strlen (pw->pw_passwd));
free (pw->pw_passwd); free (pw->pw_passwd);
free (pw->pw_gecos); free (pw->pw_gecos);
free (pw->pw_dir); free (pw->pw_dir);

1
lib/sgroupio.c
View File

@ -102,6 +102,7 @@ static void gshadow_free (void *ent)
struct sgrp *sg = ent; struct sgrp *sg = ent;
free (sg->sg_name); free (sg->sg_name);
memzero (sg->sg_passwd, strlen (sg->sg_passwd));
free (sg->sg_passwd); free (sg->sg_passwd);
while (NULL != *(sg->sg_adm)) { while (NULL != *(sg->sg_adm)) {
free (*(sg->sg_adm)); free (*(sg->sg_adm));

3
lib/shadowio.c
View File

@ -3,7 +3,7 @@
* Copyright (c) 1996 - 2000, Marek Michałkiewicz * Copyright (c) 1996 - 2000, Marek Michałkiewicz
* Copyright (c) 2001 , Michał Moskal * Copyright (c) 2001 , Michał Moskal
* Copyright (c) 2005 , Tomasz Kłoczko * Copyright (c) 2005 , Tomasz Kłoczko
* Copyright (c) 2007 - 2008, Nicolas François * Copyright (c) 2007 - 2009, Nicolas François
* All rights reserved. * All rights reserved.
* *
* Redistribution and use in source and binary forms, with or without * Redistribution and use in source and binary forms, with or without
@ -54,6 +54,7 @@ static void shadow_free (void *ent)
struct spwd *sp = ent; struct spwd *sp = ent;
free (sp->sp_namp); free (sp->sp_namp);
memzero (sp->sp_pwdp, strlen (sp->sp_pwdp));
free (sp->sp_pwdp); free (sp->sp_pwdp);
free (sp); free (sp);
} }