Hi,

Use freezero instead of explicit_bzero+free on encrypt.

OK?

Index: encrypt.c
===================================================================
RCS file: /cvs/src/usr.bin/encrypt/encrypt.c,v
retrieving revision 1.46
diff -u -p -u -r1.46 encrypt.c
--- encrypt.c   3 May 2017 09:51:39 -0000       1.46
+++ encrypt.c   24 May 2017 09:04:00 -0000
@@ -169,8 +169,7 @@ main(int argc, char **argv)
                (void)fputc('\n', stdout);
 
                /* Wipe our copy, before we free it. */
-               explicit_bzero(string, strlen(string));
-               free(string);
+               freezero(string, strlen(string));
        }
        return 0;
 }

Reply via email to