CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/05/16 07:16:50
Modified files:
usr.sbin/relayd: ssl.c
Log message:
relayd: use explicit_bzero in ssl_password_cb
This replaces bzero with explicit_bzero in the SSL password callback. Since
ssl_password_cb handles sensitive data a standard bzero could be optimized
away by the compiler.
Additionally, this ensures the buffer is cleared if strlcpy fails due to
truncation, preventing password fragments from lingering in memory.
OK renaud@, kirill@
