From 6e7601e14089a79aec2accfa800c259049449b8e Mon Sep 17 00:00:00 2001
From: Ted Gould <ted@gould.cx>
Date: Tue, 28 Aug 2012 14:24:43 -0500
Subject: Now that we have long running memory with a password in it, we need
 to lock it down

---
 src/pam-freerdp.c | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'src')

diff --git a/src/pam-freerdp.c b/src/pam-freerdp.c
index e284619..f635162 100644
--- a/src/pam-freerdp.c
+++ b/src/pam-freerdp.c
@@ -23,6 +23,7 @@
 #include <sys/wait.h>
 #include <sys/types.h>
 #include <sys/socket.h>
+#include <sys/mman.h>
 #include <sys/un.h>
 #include <pwd.h>
 
@@ -128,9 +129,12 @@ get_item (pam_handle_t * pamh, int type)
 		}
 		if (type == PAM_AUTHTOK) {
 			if (global_password != NULL) {
+				memset(global_password, 0, strlen(global_password));
+				munlock(global_password, strlen(global_password));
 				free(global_password);
 			}
 			global_password = strdup(retval);
+			mlock(global_password, strlen(global_password));
 		}
 	}
 
-- 
cgit v1.2.3