Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-06-01 15:38:37 +00:00
Code Issues Projects Releases Packages Wiki Activity

[SERVICES] RChangeServiceConfigW / RCreateServiceW: Use SecureZeroMemory to wipe clear-text passwords after use.

Browse source
This commit is contained in:
Eric Kohl 2018-09-28 17:51:12 +02:00
parent b9aeb5bfbd
commit 04683639f0
1 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
base/system/services/rpcserver.c
View file

@ -2244,8 +2244,8 @@ done:
if (lpClearTextPassword != NULL) if (lpClearTextPassword != NULL)
{ {
/* Wipe and release the password buffer */ /* Wipe and release the password buffer */
ZeroMemory(lpClearTextPassword, SecureZeroMemory(lpClearTextPassword,
(wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR));
HeapFree(GetProcessHeap(), 0, lpClearTextPassword); HeapFree(GetProcessHeap(), 0, lpClearTextPassword);
} }
@ -2648,8 +2648,8 @@ done:
if (lpClearTextPassword != NULL) if (lpClearTextPassword != NULL)
{ {
/* Wipe and release the password buffer */ /* Wipe and release the password buffer */
ZeroMemory(lpClearTextPassword, SecureZeroMemory(lpClearTextPassword,
(wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR)); (wcslen(lpClearTextPassword) + 1) * sizeof(WCHAR));
HeapFree(GetProcessHeap(), 0, lpClearTextPassword); HeapFree(GetProcessHeap(), 0, lpClearTextPassword);
} }