From 8e53db927af3735d5c628a7830b587a651bb803f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Christian=20G=C3=B6ttsche?= Date: Sat, 17 Sep 2022 18:03:46 +0200 Subject: [PATCH] lib: use memzero where applicable Use memzero when operating in a buffer of known size to clear all bytes and avoid leaking the size of the stored data. --- src/sulogin.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sulogin.c b/src/sulogin.c index 08feade2..2c5e0943 100644 --- a/src/sulogin.c +++ b/src/sulogin.c @@ -216,7 +216,7 @@ static void catch_signals (unused int sig) sleep (2); (void) puts (_("Login incorrect")); } - strzero (pass); + memzero (pass, sizeof pass); (void) alarm (0); (void) signal (SIGALRM, SIG_DFL); environ = newenvp; /* make new environment active */