[gentoo-commits] gentoo commit in src/patchsets/pam_skey/1.1.5: 05_all_delete_response.patch

[Ulrich Mueller (ulm)]

ulm         13/08/28 06:01:36

  Added:                05_all_delete_response.patch
  Log:
  Erase cleartext passwords from memory, bug 482588.

Revision  Changes    Path
1.1                  src/patchsets/pam_skey/1.1.5/05_all_delete_response.patch

file : http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/pam_skey/1.1.5/05_all_delete_response.patch?rev=1.1&view=markup
plain: http://sources.gentoo.org/viewvc.cgi/gentoo/src/patchsets/pam_skey/1.1.5/05_all_delete_response.patch?rev=1.1&content-type=text/plain

Index: 05_all_delete_response.patch
===================================================================
https://bugs.gentoo.org/482588
Erase cleartext passwords from memory (CVE-2013-4285).

--- pam_skey-1.1.5/pam_skey.c
+++ pam_skey/pam_skey.c
@@ -129,6 +129,7 @@
     }
     if (strcasecmp(response,"s/key")!=0) {
       status = pam_set_item(pamh, PAM_AUTHTOK, response);
+      _pam_delete(response);
       if (status != PAM_SUCCESS)
 	return status;
       return PAM_IGNORE;
@@ -176,6 +177,7 @@
   }
 
   status = pam_set_item(pamh, PAM_AUTHTOK, response);
+  _pam_delete(response);
   return PAM_IGNORE;
 }