Changeset 93394 in vbox for trunk/src/VBox/Devices/Network

Timestamp:

Jan 21, 2022 11:56:37 AM (3 years ago)

Author:

vboxsync

Message:

DrvCloudTunnel: Must thorougly wipe the buffer with the ssh password as soon as it's no longer needed. bugref:9469

File:

• trunk/src/VBox/Devices/Network/DrvCloudTunnel.cpp (modified) (1 diff)

trunk/src/VBox/Devices/Network/DrvCloudTunnel.cpp

@@ -1509 +1509 @@
                                 N_("DrvCloudTunnel: Configuration error: Querying \"SshKey\" as password failed"));
     rc = ssh_pki_import_privkey_base64(szVal, NULL, NULL, NULL, &pThis->SshKey);
+    RTMemWipeThoroughly(szVal, sizeof(szVal), 10);
     if (rc != SSH_OK)
         return PDMDRV_SET_ERROR(pDrvIns, VERR_INVALID_BASE64_ENCODING,