From 5cd3bc283f665c6196ab07ea7d8978ce28ff4447 Mon Sep 17 00:00:00 2001 From: dim Date: Fri, 16 Dec 2011 00:48:53 +0000 Subject: [PATCH] In contrib/telnet/libtelnet/sra.c, use the correct number of bytes to zero the password buffer. MFC after: 1 week --- contrib/telnet/libtelnet/sra.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/contrib/telnet/libtelnet/sra.c b/contrib/telnet/libtelnet/sra.c index 194048532b4e..4a759685ca42 100644 --- a/contrib/telnet/libtelnet/sra.c +++ b/contrib/telnet/libtelnet/sra.c @@ -303,7 +303,7 @@ sra_reply(Authenticator *ap, unsigned char *data, int cnt) goto enc_user; } /* encode password */ - memset(pass,0,sizeof(pass)); + memset(pass,0,256); telnet_gets("Password: ",pass,255,0); pk_encode(pass,xpass,&ck); /* send it off */