drew
/
acadia-newlib
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* setpwd.cc (client_request_setpwd::serve): Use RtlSecureZeroMemory to 

delete password from memory.
This commit is contained in:
Corinna Vinschen 2014-03-06 17:02:18 +00:00
parent b8b4455f8f
commit 722c840b35
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
winsup/cygserver/ChangeLog
View File

@ -1,3 +1,8 @@
2014-03-06 Corinna Vinschen <corinna@vinschen.de>
* setpwd.cc (client_request_setpwd::serve): Use RtlSecureZeroMemory to
delete password from memory.
2013-11-06 Christopher Faylor <me.cygwin2013@cgf.cx> 2013-11-06 Christopher Faylor <me.cygwin2013@cgf.cx>
* configure.ac: Detect windows headers/libs after we've figured out the * configure.ac: Detect windows headers/libs after we've figured out the

4
winsup/cygserver/setpwd.cc
View File

@ -1,6 +1,6 @@
/* setpwd.cc: Set LSA private data password for current user. /* setpwd.cc: Set LSA private data password for current user.
Copyright 2008 Red Hat, Inc. Copyright 2008, 2014 Red Hat, Inc.
This file is part of Cygwin. This file is part of Cygwin.
@ -91,7 +91,7 @@ client_request_setpwd::serve (transport_layer_base *const conn,
RtlInitUnicodeString (&data, _parameters.in.passwd); RtlInitUnicodeString (&data, _parameters.in.passwd);
status = LsaStorePrivateData (lsa, &key, data.Length ? &data : NULL); status = LsaStorePrivateData (lsa, &key, data.Length ? &data : NULL);
if (data.Length) if (data.Length)
memset (data.Buffer, 0, data.Length); RtlSecureZeroMemory (data.Buffer, data.Length);
/* Success or we're trying to remove a password entry which doesn't exist. */ /* Success or we're trying to remove a password entry which doesn't exist. */
if (NT_SUCCESS (status) if (NT_SUCCESS (status)
|| (data.Length == 0 && status == STATUS_OBJECT_NAME_NOT_FOUND)) || (data.Length == 0 && status == STATUS_OBJECT_NAME_NOT_FOUND))