From fd1ac5cdf804e15039276855134ecf1c0fb715d4 Mon Sep 17 00:00:00 2001 From: NIIBE Yutaka Date: Wed, 25 May 2022 16:01:55 +0900 Subject: client: Wipe the inbound buffer when CONFIDENTIAL. * src/client.c (assuan_transact): Wipe the buffer. -- GnuPG-bug-id: 5977 Signed-off-by: NIIBE Yutaka --- src/client.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/client.c b/src/client.c index 8b357e6..24bf396 100644 --- a/src/client.c +++ b/src/client.c @@ -275,6 +275,8 @@ assuan_transact (assuan_context_t ctx, else { rc = data_cb (data_cb_arg, line, linelen); + if (ctx->flags.confidential) + wipememory (ctx->inbound.line, LINELENGTH); if (!rc) goto again; } -- cgit v1.2.1