From ad6c4985fc421bb47d465c764fe9c06ed21a452c Mon Sep 17 00:00:00 2001 From: JacobBarthelmeh Date: Fri, 24 Jul 2026 15:13:12 -0600 Subject: [PATCH] force zero on password buffer after use --- apps/wolfsshd/auth.c | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/wolfsshd/auth.c b/apps/wolfsshd/auth.c index 4ed6bd81a..5f3cf5a8a 100644 --- a/apps/wolfsshd/auth.c +++ b/apps/wolfsshd/auth.c @@ -1547,6 +1547,7 @@ static int CheckPasswordWIN(const char* usr, const byte* pw, word32 pwSz, WOLFSS } if (pwW != NULL) { + WS_FORCEZERO(pwW, (word32)((pwWSz * sizeof(WCHAR)) + sizeof(WCHAR))); WFREE(pwW, authCtx->heap, DYNTYPE_SSHD); }