Commite4db972

committed

Use explicit_bzero() when clearing sslpassword in libpq

Since74a308c, any security-sensitive information gets cleared frommemory this way. This was forgotten in4dc6355.Author: Daniel GustafssonReviewed-by: Peter Eisentraut, Michael PaquierDiscussion:https://postgr.es/m/935443BA-D42E-4CE0-B181-1AD79E6DD45A@yesql.se

1 parentd2a9959 commite4db972Copy full SHA for e4db972

File tree

-0

lines changed

-0

lines changed

Lines changed: 3 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -4037,7 +4037,10 @@ freePGconn(PGconn *conn)`
`4037`	`4037`	`if (conn->sslkey)`
`4038`	`4038`	`free(conn->sslkey);`
`4039`	`4039`	`if (conn->sslpassword)`
	`4040`	`+{`
	`4041`	`+explicit_bzero(conn->sslpassword,strlen(conn->sslpassword));`
`4040`	`4042`	`free(conn->sslpassword);`
	`4043`	`+}`
`4041`	`4044`	`if (conn->sslrootcert)`
`4042`	`4045`	`free(conn->sslrootcert);`
`4043`	`4046`	`if (conn->sslcrl)`

Comments

(0)