krb5: use memset_s() in krb5_free_keyblock_contents()
authorLuke Howard <lukeh@padl.com>
Tue, 14 Apr 2020 10:21:09 +0000 (20:21 +1000)
committerLuke Howard <lukeh@padl.com>
Tue, 14 Apr 2020 10:22:07 +0000 (20:22 +1000)
krb5_free_keyblock_contents() should use memset_s() to ensure that the key is
zero'd before freeing

lib/krb5/keyblock.c

index abca3ee059f6b34c4f6e991818d8dcab3514e191..317bed382d77b5b7324ef28c492e5ffcfe9dad18 100644 (file)
@@ -63,7 +63,8 @@ krb5_free_keyblock_contents(krb5_context context,
 {
     if(keyblock) {
        if (keyblock->keyvalue.data != NULL)
-           memset(keyblock->keyvalue.data, 0, keyblock->keyvalue.length);
+           memset_s(keyblock->keyvalue.data, keyblock->keyvalue.length,
+                    0, keyblock->keyvalue.length);
        krb5_data_free (&keyblock->keyvalue);
        keyblock->keytype = KRB5_ENCTYPE_NULL;
     }