From 04683639f06a6e8d4669448e2c583f3c885e8efa Mon Sep 17 00:00:00 2001 From: Eric Kohl Date: Fri, 28 Sep 2018 17:51:12 +0200 Subject: [PATCH] [SERVICES] RChangeServiceConfigW / RCreateServiceW: Use SecureZeroMemory to wipe clear-text passwords after use. --- base/system/services/rpcserver.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/base/system/services/rpcserver.c b/base/system/services/rpcserver.c index f21df10e571..7f251c87609 100644 --- a/base/system/services/rpcserver.c +++ b/base/system/services/rpcserver.c @@ -2244,8 +2244,8 @@ done: if (lpClearTextPassword != NULL) { /* Wipe and release the password buffer */ - ZeroMemory(lpClearTextPassword, - (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); + SecureZeroMemory(lpClearTextPassword, + (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); HeapFree(GetProcessHeap(), 0, lpClearTextPassword); } @@ -2648,8 +2648,8 @@ done: if (lpClearTextPassword != NULL) { /* Wipe and release the password buffer */ - ZeroMemory(lpClearTextPassword, - (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); + SecureZeroMemory(lpClearTextPassword, + (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); HeapFree(GetProcessHeap(), 0, lpClearTextPassword); }