Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Swaylock: Clear password buffer after use. #1519

Merged
merged 1 commit into from
Dec 17, 2017
Merged

Swaylock: Clear password buffer after use. #1519

merged 1 commit into from
Dec 17, 2017

Commits on Dec 15, 2017

  1. Swaylock: Clear password buffer after use. 

    After a user enters or clears a password, try to overwrite the buffer containing it. That way it's not sitting around in RAM for something else to read later. Also, mlock() the password buffer so that it is never swapped out.

This also replaces the dynamically allocated buffer with a static char[1024]. Any characters past that are discarded until the user hits enter or escape.
    @ggreer
    ggreer committed Dec 15, 2017
    Configuration menu
    Copy the full SHA
    1312db8 View commit details
    Browse the repository at this point in the history