THRIFT-1844: Overwrite password string after passing it to openssl.
Sponsored-by: Roger Meier <r.meier@siemens.com>
Signed-off-by: Claudius Heine <ch@denx.de>
diff --git a/lib/cpp/src/thrift/transport/TSSLSocket.cpp b/lib/cpp/src/thrift/transport/TSSLSocket.cpp
index 622dfa4..ecc7896 100644
--- a/lib/cpp/src/thrift/transport/TSSLSocket.cpp
+++ b/lib/cpp/src/thrift/transport/TSSLSocket.cpp
@@ -581,6 +581,7 @@
length = size;
}
strncpy(password, userPassword.c_str(), length);
+ userPassword.assign(userPassword.size(), '*');
return length;
}