aboutsummaryrefslogtreecommitdiff
path: root/server-msg.c
diff options
context:
space:
mode:
authorNicholas Marriott <nicm@openbsd.org>2009-06-04 21:43:24 +0000
committerNicholas Marriott <nicm@openbsd.org>2009-06-04 21:43:24 +0000
commit50bd0948564c64d76acebf8f6c5b4f3ef7b6b4fc (patch)
tree47681e4b8fbabd0b8bc8c7a31d513d6b3eacb22c /server-msg.c
parentf031975dc09b7be9bdb32fd5256f8c325848b1f9 (diff)
downloadrtmux-50bd0948564c64d76acebf8f6c5b4f3ef7b6b4fc.tar.gz
rtmux-50bd0948564c64d76acebf8f6c5b4f3ef7b6b4fc.tar.bz2
rtmux-50bd0948564c64d76acebf8f6c5b4f3ef7b6b4fc.zip
If the prompt is hidden or a password is sent with -U, zero it before freeing
it.
Diffstat (limited to 'server-msg.c')
-rw-r--r--server-msg.c5
1 files changed, 3 insertions, 2 deletions
diff --git a/server-msg.c b/server-msg.c
index cff23cd5..5eaa04db 100644
--- a/server-msg.c
+++ b/server-msg.c
@@ -278,13 +278,14 @@ server_msg_fn_unlock(struct hdr *hdr, struct client *c)
if (server_unlock(pass) != 0) {
#define MSG "bad password"
server_write_client(c, MSG_ERROR, MSG, (sizeof MSG) - 1);
- server_write_client(c, MSG_EXIT, NULL, 0);
- return (0);
#undef MSG
}
server_write_client(c, MSG_EXIT, NULL, 0);
+ memset(pass, 0, strlen(pass));
+ xfree(pass);
+
return (0);
}