From 64919b3fdaa41fbdb857cc2b1f4680dd30f14727 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Thu, 22 Jun 2017 10:28:08 +0200 Subject: wipe second factor from memory --- udev/ykfde.c | 1 + 1 file changed, 1 insertion(+) diff --git a/udev/ykfde.c b/udev/ykfde.c index ab20fbd..ef0cefc 100644 --- a/udev/ykfde.c +++ b/udev/ykfde.c @@ -178,6 +178,7 @@ static int get_response(const unsigned int serial, uint8_t slot, char * challeng second_factor_len = strlen(second_factor); memcpy(challenge, second_factor, second_factor_len < CHALLENGELEN / 2 ? second_factor_len : CHALLENGELEN / 2); + memset(second_factor, 0, second_factor_len); free(second_factor); } -- cgit v1.2.3-70-g09d2