clear passwords with explicit_bzero
authorHiltjo Posthuma <hiltjo@codemadness.org>
Sun, 31 Jul 2016 11:43:00 +0000 (13:43 +0200)
committerHiltjo Posthuma <hiltjo@codemadness.org>
Sat, 13 Aug 2016 07:58:00 +0000 (09:58 +0200)
commita7afade1701a809f6a33b53525d59dd29b38d381
tree45bb7250f76f0ed0261354ae313c4f0c3a561eb6
parent65b8d5278882310eed758e6fbfd6ab9676db883c
clear passwords with explicit_bzero

Make sure to explicitly clear memory that is used for password input. memset
is often optimized out by the compiler.

Brought to attention by the OpenBSD community, see:
https://marc.info/?t=146989502600003&r=1&w=2
Thread subject: x11/slock: clear passwords with explicit_bzero

Changes:

- explicit_bzero.c import from libressl-portable.
- Makefile: add COMPATSRC for compatibility src.
- config.mk: add separate *BSD section in config.mk to simply uncomment it on
  these platforms.
Makefile
config.mk
explicit_bzero.c [new file with mode: 0644]
slock.c
util.h [new file with mode: 0644]