ref: 5a84d57404bdc77ec86eb0af2c884b6176626d0b
parent: f4fd3b71100121ae065ccaa5b58bee684c87718e
author: Natanael Copa <ncopa@alpinelinux.org>
date: Tue Jan 10 14:33:12 CST 2017
nlplug-findfs: wipe password after use
--- a/nlplug-findfs.c
+++ b/nlplug-findfs.c
@@ -583,6 +583,7 @@
CRYPT_ANY_SLOT,
pass, strlen(pass), 0);
pthread_mutex_unlock(&c->cryptsetup_mutex);
+ memset(pass, 0, sizeof(pass)); /* wipe pass after use */
if (r >= 0)
goto free_out;