From a00fb233dc1696d2e0f36171d54bd3467dfdc38e Mon Sep 17 00:00:00 2001 From: Marian Buschsieweke Date: Mon, 19 Sep 2022 17:22:13 +0200 Subject: [PATCH] sys/net/credman: fix insecure memory wiping --- sys/net/credman/credman.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/sys/net/credman/credman.c b/sys/net/credman/credman.c index 1f8ca6b513..4279a31cc6 100644 --- a/sys/net/credman/credman.c +++ b/sys/net/credman/credman.c @@ -16,9 +16,10 @@ * @author Aiman Ismail */ -#include "net/credman.h" -#include "mutex.h" #include "kernel_defines.h" +#include "mutex.h" +#include "net/credman.h" +#include "string_utils.h" #include #include @@ -395,7 +396,7 @@ void credman_delete(credman_tag_t tag, credman_type_t type) mutex_lock(&_mutex); int pos = _find_credential_pos(tag, type, NULL); if (pos >= 0) { - memset(&credentials[pos], 0, sizeof(credman_credential_t)); + explicit_bzero(&credentials[pos], sizeof(credman_credential_t)); used--; } mutex_unlock(&_mutex);