From e9b2d164e0f9c597f55f546b8d62e0c04423fec5 Mon Sep 17 00:00:00 2001
From: Aris Adamantiadis <aris@0xbadc0de.be>
Date: Mon, 1 Sep 2014 08:42:01 +0200
Subject: base64: Use a secure buffer.

Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
---
 src/base64.c | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'src/base64.c')

diff --git a/src/base64.c b/src/base64.c
index e5981f55..2a162d0b 100644
--- a/src/base64.c
+++ b/src/base64.c
@@ -82,6 +82,11 @@ ssh_buffer base64_to_bin(const char *source) {
     SAFE_FREE(base64);
     return NULL;
   }
+  /*
+   * The base64 buffer often contains sensitive data. Make sure we don't leak
+   * sensitive data
+   */
+  ssh_buffer_set_secure(buffer);
 
   len = strlen(ptr);
   while (len > 4) {
-- 
cgit v1.2.3