From d1ebe374b4c02f94eaaaf422943d40a0f40a26cc Mon Sep 17 00:00:00 2001 From: Dirk Engling Date: Sat, 21 May 2022 16:34:28 +0200 Subject: Guard memset_s. Use explicit_bzero on openbsd and linux --- vchat-tls.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/vchat-tls.c b/vchat-tls.c index 187f10b..d2f3b01 100755 --- a/vchat-tls.c +++ b/vchat-tls.c @@ -573,7 +573,11 @@ int vc_tls_connect(int serverfd, vc_x509store_t *vc_store) { vc_store->askpass_callback(password_buf, sizeof(password_buf), 0, NULL); password = password_buf; } +#if defined(__linux__) || defined(__OpenBSD__) + explicit_bzero(password_buf, sizeof(password_buf)); +#else memset_s(password_buf, sizeof(password_buf), 0, sizeof(password_buf)); +#endif writecf(FS_SERV, "[CLIENT KEY LOADED ]"); #if MBEDTLS_VERSION_MAJOR == 3 && MBEDTLS_VERSION_MINOR == 0 -- cgit v1.2.3