From 85fd77a145174662dbe073f8669f5c22d4240dd0 Mon Sep 17 00:00:00 2001
From: Corinna Vinschen <corinna@vinschen.de>
Date: Mon, 15 Dec 2008 17:39:39 +0000
Subject: 	* setlsapwd.cc (setlsapwd): Explicitely erase password buffer
 content 	after usage.

---
 winsup/cygwin/setlsapwd.cc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'winsup/cygwin/setlsapwd.cc')

diff --git a/winsup/cygwin/setlsapwd.cc b/winsup/cygwin/setlsapwd.cc
index 34284afd3..401e48768 100644
--- a/winsup/cygwin/setlsapwd.cc
+++ b/winsup/cygwin/setlsapwd.cc
@@ -84,7 +84,10 @@ setlsapwd (const char *passwd)
       __seterrno_from_nt_status (status);
 #endif
       if (data_buf)
-	free (data_buf);
+	{
+	  memset (data.Buffer, 0, data.Length);
+	  free (data_buf);
+	}
     }
   return ret;
 }
-- 
cgit v1.2.3