diff options
| author | Corinna Vinschen <corinna@vinschen.de> | 2014-03-06 17:02:18 +0000 |
|---|---|---|
| committer | Corinna Vinschen <corinna@vinschen.de> | 2014-03-06 17:02:18 +0000 |
| commit | 722c840b35178adc5b5ad438334a04723cc624ac (patch) | |
| tree | d0122310fc7d59aa09a58f8014394923571e1b9b /winsup/cygserver/setpwd.cc | |
| parent | b8b4455f8fb53971c4001083404968f983e6df47 (diff) | |
| download | cygnal-722c840b35178adc5b5ad438334a04723cc624ac.tar.gz cygnal-722c840b35178adc5b5ad438334a04723cc624ac.tar.bz2 cygnal-722c840b35178adc5b5ad438334a04723cc624ac.zip | |
* setpwd.cc (client_request_setpwd::serve): Use RtlSecureZeroMemory to
delete password from memory.
Diffstat (limited to 'winsup/cygserver/setpwd.cc')
| -rw-r--r-- | winsup/cygserver/setpwd.cc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/winsup/cygserver/setpwd.cc b/winsup/cygserver/setpwd.cc index 8125fd25a..4f996d3b5 100644 --- a/winsup/cygserver/setpwd.cc +++ b/winsup/cygserver/setpwd.cc @@ -1,6 +1,6 @@ /* setpwd.cc: Set LSA private data password for current user. - Copyright 2008 Red Hat, Inc. + Copyright 2008, 2014 Red Hat, Inc. This file is part of Cygwin. @@ -91,7 +91,7 @@ client_request_setpwd::serve (transport_layer_base *const conn, RtlInitUnicodeString (&data, _parameters.in.passwd); status = LsaStorePrivateData (lsa, &key, data.Length ? &data : NULL); if (data.Length) - memset (data.Buffer, 0, data.Length); + RtlSecureZeroMemory (data.Buffer, data.Length); /* Success or we're trying to remove a password entry which doesn't exist. */ if (NT_SUCCESS (status) || (data.Length == 0 && status == STATUS_OBJECT_NAME_NOT_FOUND)) |