← Commit list

bd81f15ec2

Martin Dukek
Martin Dukek
2026-08-28
SUCCESS Duration: 429s

Subject

schannel: clear PFX password before free

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

lib/vtls/schannel.c +1 -0
lib/vtls/schannel.c+1 -0
@@ -484,6 +484,7 @@ static CURLcode get_client_cert(struct Curl_cfilter *cf,
cert_store = PFXImportCertStore(&datablob, pszPassword,
PKCS12_NO_PERSIST_KEY);
+ curlx_memzero(pszPassword, sizeof(WCHAR) * (pwd_len + 1));
curlx_free(pszPassword);
}
if(!blob)