Switch from memset_s() -> explicit_bzero().

memset_s() (and all of Annex K) is likely to be removed from the
a future version of the standard.
This commit is contained in:
Todd C. Miller
2020-08-10 19:24:32 -06:00
parent 8a97150f56
commit cef6e3687e
25 changed files with 168 additions and 192 deletions

View File

@@ -243,7 +243,7 @@ sudo_aix_verify(struct passwd *pw, char *prompt, sudo_auth *auth, struct sudo_co
free(message);
message = NULL;
result = authenticate(pw->pw_name, pass, &reenter, &message);
memset_s(pass, SUDO_CONV_REPL_MAX, 0, strlen(pass));
explicit_bzero(pass, strlen(pass));
free(pass);
prompt = message;
} while (reenter);