diff options
author | Hiltjo Posthuma <hiltjo@codemadness.org> | 2016-07-31 13:43:00 +0200 |
---|---|---|
committer | Hiltjo Posthuma <hiltjo@codemadness.org> | 2016-08-13 09:58:00 +0200 |
commit | a7afade1701a809f6a33b53525d59dd29b38d381 (patch) | |
tree | 45bb7250f76f0ed0261354ae313c4f0c3a561eb6 /Makefile | |
parent | 65b8d5278882310eed758e6fbfd6ab9676db883c (diff) | |
download | slock-a7afade1701a809f6a33b53525d59dd29b38d381.tar.gz slock-a7afade1701a809f6a33b53525d59dd29b38d381.tar.xz |
clear passwords with explicit_bzero
Make sure to explicitly clear memory that is used for password input. memset
is often optimized out by the compiler.
Brought to attention by the OpenBSD community, see:
https://marc.info/?t=146989502600003&r=1&w=2
Thread subject: x11/slock: clear passwords with explicit_bzero
Changes:
- explicit_bzero.c import from libressl-portable.
- Makefile: add COMPATSRC for compatibility src.
- config.mk: add separate *BSD section in config.mk to simply uncomment it on
these platforms.
Diffstat (limited to 'Makefile')
-rw-r--r-- | Makefile | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -3,7 +3,7 @@ include config.mk -SRC = slock.c +SRC = slock.c ${COMPATSRC} OBJ = ${SRC:.c=.o} all: options slock @@ -35,8 +35,8 @@ clean: dist: clean @echo creating dist tarball @mkdir -p slock-${VERSION} - @cp -R LICENSE Makefile README config.def.h config.mk ${SRC} slock.1 \ - slock-${VERSION} + @cp -R LICENSE Makefile README config.def.h config.mk ${SRC} \ + explicit_bzero.c slock.1 slock-${VERSION} @tar -cf slock-${VERSION}.tar slock-${VERSION} @gzip slock-${VERSION}.tar @rm -rf slock-${VERSION} |