The branch, master has been updated
via efc58fd56d8 nsswitch/libwbclient: Zero memory in libwbclient
from 43477d8b5be release.sh: also replace "y acute" character with html
entity
https://git.samba.org/?p=samba.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit efc58fd56d81be9f68a79aa5802107d046f149d0
Author: Pavel Filipenský <[email protected]>
Date: Mon Dec 8 16:09:53 2025 +0100
nsswitch/libwbclient: Zero memory in libwbclient
Signed-off-by: Pavel Filipenský <[email protected]>
Reviewed-by: Volker Lendecke <[email protected]>
Autobuild-User(master): Volker Lendecke <[email protected]>
Autobuild-Date(master): Thu Jan 8 12:59:02 UTC 2026 on atb-devel-224
-----------------------------------------------------------------------
Summary of changes:
nsswitch/libwbclient/wbc_util.c | 5 +++++
1 file changed, 5 insertions(+)
Changeset truncated at 500 lines:
diff --git a/nsswitch/libwbclient/wbc_util.c b/nsswitch/libwbclient/wbc_util.c
index d97e00db383..59204b4deac 100644
--- a/nsswitch/libwbclient/wbc_util.c
+++ b/nsswitch/libwbclient/wbc_util.c
@@ -848,6 +848,11 @@ static void wbcNamedBlobDestructor(void *ptr)
while (b->name != NULL) {
free(discard_const_p(char, b->name));
+ /*
+ * This targets sensitive data like "session_key". To make the
+ * implementation simple, we zero every wbcNamedBlob.
+ */
+ BURN_PTR_SIZE(b->blob.data, b->blob.length);
free(b->blob.data);
b += 1;
}
--
Samba Shared Repository
