Horton

Use explicit_bzero() when clearing sslpassword in libpq

Michael Paquier <michael@paquier.xyz>

View on postgr.es
Commit: e4db972ed5f12c09403ff0be24e12e5d4032aaaa
Author: Michael Paquier <michael@paquier.xyz>
Date: 2020-05-21T06:49:20Z
Releases: 13.0 
Use explicit_bzero() when clearing sslpassword in libpq

Since 74a308c, any security-sensitive information gets cleared from
memory this way.  This was forgotten in 4dc6355.

Author: Daniel Gustafsson
Reviewed-by: Peter Eisentraut, Michael Paquier
Discussion: https://postgr.es/m/935443BA-D42E-4CE0-B181-1AD79E6DD45A@yesql.se

Files

PathChange+/−
src/interfaces/libpq/fe-connect.c modified +3 −0

Discussion