jimzah/openafs
1
0
Fork 0
mirror of https://git.openafs.org/openafs.git synced 2025-01-19 15:30:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Windows: NPLogonNotify secure erase password

Browse Source 
The user's password is copied during the NPLogonNotify
processing, be sure to erase it from the stack before the
function completes.

Change-Id: Ib600f5656f7b32628e7105336ff0ffef8f15272f
Reviewed-on: http://gerrit.openafs.org/7632
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Jeffrey Altman <jaltman@your-file-system.com>
Tested-by: Jeffrey Altman <jaltman@your-file-system.com>
This commit is contained in:
Jeffrey Altman 2012-06-18 21:49:18 -04:00
parent c8b1f007b5
commit 187af8d113
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/WINNT/afsd/afslogon.c
View File

@ -1205,6 +1205,8 @@ NPLogonNotify(
if (opt.smbName) free(opt.smbName);
if (opt.realm) free(opt.realm);
SecureZeroMemory(password, sizeof(password));
DebugEvent("AFS AfsLogon - Exit","Return Code[%x]",code);
return code;
}