[krbdev.mit.edu #8713] git commit

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[krbdev.mit.edu #8713] git commit

Greg Hudson via RT-2

Zap copy of secret in RC4 string-to-key

Commit b8814745049b5f401e3ae39a81dc1e14598ae48c (ticket 8576) added a
zero-terminated copy of the input string in
krb5int_arcfour_string_to_key().  This copy should be zeroed when
freed as the input string typically contains a password.

[[hidden email]: rewrote commit message]

https://github.com/krb5/krb5/commit/5d19f90f3216309c311507acbca2c8d0a286d632
Author: Dylan Gray <[hidden email]>
Committer: Greg Hudson <[hidden email]>
Commit: 5d19f90f3216309c311507acbca2c8d0a286d632
Branch: master
 src/lib/crypto/krb/s2k_rc4.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

_______________________________________________
krb5-bugs mailing list
[hidden email]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs