isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

auth_getpass() returns a dynamically allocated copy of the plaintext

Browse Source 
password which needs to be freed after checking (and clearing) it.
This commit is contained in:
Todd C. Miller
2016-01-27 15:36:50 -07:00
parent 91bce65e29
commit ab11cdde2c
7 changed files with 26 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
plugins/sudoers/auth/sudo_auth.c
View File

@@ -296,8 +296,10 @@ verify_user(struct passwd *pw, char *prompt, int validated,
if (success != AUTH_FAILURE)
break;
}
if (!standalone)
if (!standalone) {
memset_s(p, SUDO_CONV_REPL_MAX, 0, strlen(p));
free(p);
}
if (success != AUTH_FAILURE)
goto done;
@@ -387,6 +389,11 @@ sudo_auth_end_session(struct passwd *pw)
debug_return_int(status == AUTH_FATAL ? -1 : 1);
}
/*
* Prompts the user for a password using the conversation function.
* Returns the plaintext password or NULL.
* The user is responsible for freeing the returned value.
*/
char *
auth_getpass(const char *prompt, int timeout, int type,
struct sudo_conv_callback *callback)