In contrib/telnet/libtelnet/sra.c, use the correct number of bytes to

zero the password buffer.

MFC after:	1 week
This commit is contained in:
dim 2011-12-16 00:48:53 +00:00
parent f5af6108d0
commit 5cd3bc283f

View File

@ -303,7 +303,7 @@ sra_reply(Authenticator *ap, unsigned char *data, int cnt)
goto enc_user;
}
/* encode password */
memset(pass,0,sizeof(pass));
memset(pass,0,256);
telnet_gets("Password: ",pass,255,0);
pk_encode(pass,xpass,&ck);
/* send it off */