Re: explicit_bzero for sslpassword - Mailing list pgsql-hackers

From Peter Eisentraut
Subject Re: explicit_bzero for sslpassword
Date
Msg-id 953f15bb-0afb-8148-9425-0e47e3930d7a@2ndquadrant.com
Whole thread Raw
In response to Re: explicit_bzero for sslpassword  (Michael Paquier <michael@paquier.xyz>)
Responses Re: explicit_bzero for sslpassword
List pgsql-hackers
On 2020-05-20 07:56, Michael Paquier wrote:
> On Tue, May 19, 2020 at 02:33:40PM +0200, Daniel Gustafsson wrote:
>> Since commit 74a308cf5221f we use explicit_bzero on pgpass and connhost
>> password in libpq, but not sslpassword which seems an oversight.  The attached
>> performs an explicit_bzero before freeing like the pattern for other password
>> variables.
> 
> Good catch, let's fix that.  I would like to apply your suggested fix,
> but let's see first if others have any comments.

Looks correct to me.

-- 
Peter Eisentraut              http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services



pgsql-hackers by date:

Previous
From: Guillaume Lelarge
Date:
Subject: Extensions not dumped when --schema is used
Next
From: Laurenz Albe
Date:
Subject: Re: Extensions not dumped when --schema is used