libs/newlib-cygwin
libs
/
newlib-cygwin
mirror of git://sourceware.org/git/newlib-cygwin.git
4
0
Fork 0
Code Issues Projects Releases Wiki Activity

* setpwd.cc (client_request_setpwd::serve): Use RtlSecureZeroMemory to 

delete password from memory.
This commit is contained in:
Corinna Vinschen 2014-03-06 17:02:18 +00:00
parent b8b4455f8f
commit 722c840b35
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
winsup/cygserver/ChangeLog
View File

@ -1,3 +1,8 @@
2014-03-06 Corinna Vinschen <corinna@vinschen.de>
* setpwd.cc (client_request_setpwd::serve): Use RtlSecureZeroMemory to
delete password from memory.
2013-11-06 Christopher Faylor <me.cygwin2013@cgf.cx>
* configure.ac: Detect windows headers/libs after we've figured out the

4
winsup/cygserver/setpwd.cc
View File

@ -1,6 +1,6 @@
/* setpwd.cc: Set LSA private data password for current user.
Copyright 2008 Red Hat, Inc.
Copyright 2008, 2014 Red Hat, Inc.
This file is part of Cygwin.
@ -91,7 +91,7 @@ client_request_setpwd::serve (transport_layer_base *const conn,
RtlInitUnicodeString (&data, _parameters.in.passwd);
status = LsaStorePrivateData (lsa, &key, data.Length ? &data : NULL);
if (data.Length)
memset (data.Buffer, 0, data.Length);
RtlSecureZeroMemory (data.Buffer, data.Length);
/* Success or we're trying to remove a password entry which doesn't exist. */
if (NT_SUCCESS (status)
|| (data.Length == 0 && status == STATUS_OBJECT_NAME_NOT_FOUND))