From 38e072b353f5b1325bbf52dfb759fe49ff6ef0f7 Mon Sep 17 00:00:00 2001 From: Duncaen Date: Wed, 30 Jan 2019 23:35:25 +0100 Subject: [PATCH] shadow: clear phassphrase earlier --- shadow.c | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/shadow.c b/shadow.c index 53877d5..71c71c6 100644 --- a/shadow.c +++ b/shadow.c @@ -70,14 +70,12 @@ shadowauth(const char *myname, int persist) explicit_bzero(rbuf, sizeof(rbuf)); errx(1, "Authorization failed"); } + explicit_bzero(rbuf, sizeof(rbuf)); if (strcmp(encrypted, hash) != 0) { - explicit_bzero(rbuf, sizeof(rbuf)); syslog(LOG_AUTHPRIV | LOG_NOTICE, "failed auth for %s", myname); errx(1, "Authorization failed"); } - explicit_bzero(rbuf, sizeof(rbuf)); - #ifdef USE_TIMESTAMP good: if (fd != -1) { -- 2.39.2