EAP-pwd: Clear identity string and temporary buffer explicitly
authorJouni Malinen <j@w1.fi>
Thu, 24 Jul 2014 16:55:15 +0000 (19:55 +0300)
committerJouni Malinen <j@w1.fi>
Thu, 24 Jul 2014 17:12:57 +0000 (20:12 +0300)
commit1f1fe195cd8907badca6d4ee17e5fa638b6f83db
tree2be30f26134ae9a214c69d9aee8c277358a70586
parentf119d6694250d5ac4105da72ddbdbe793251d230
EAP-pwd: Clear identity string and temporary buffer explicitly

Use an explicit memset call to clear any configuration parameter and
dynamic data that contains private information like keys or identity.
This brings in an additional layer of protection by reducing the length
of time this type of private data is kept in memory.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/eap_peer/eap_pwd.c
src/eap_server/eap_server_pwd.c