denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix leak of PINs from ipsec.secrets

Browse Source
This commit is contained in:
Martin Willi
2012-10-09 11:54:00 +02:00
parent f4263eaef6
commit 82f3549fe2
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_cred.c
+2 -1
View File
@@ -666,7 +666,7 @@ static bool load_pin(private_stroke_cred_t *this, chunk_t line, int line_nr,
free(secret.ptr); free(secret.ptr);
if (!prompt) if (!prompt)
{ /* no IO channel to prompt, skip */ { /* no IO channel to prompt, skip */
free(chunk.ptr); chunk_clear(&chunk);
return TRUE; return TRUE;
} }
/* use callback credential set to prompt for the pin */ /* use callback credential set to prompt for the pin */
@@ -719,6 +719,7 @@ static bool load_pin(private_stroke_cred_t *this, chunk_t line, int line_nr,
lib->credmgr->remove_local_set(lib->credmgr, &cb->set); lib->credmgr->remove_local_set(lib->credmgr, &cb->set);
cb->destroy(cb); cb->destroy(cb);
} }
chunk_clear(&chunk);
if (key) if (key)
{ {