From 4c4776b7a160e146de351c0706927d3224449751 Mon Sep 17 00:00:00 2001
From: "C. McEnroe" <june@causal.agency>
Date: Sat, 21 Aug 2021 16:08:55 -0400
Subject: Zero local-key memory before freeing it

---
 local.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/local.c b/local.c
index ff879c8..a7f4abb 100644
--- a/local.c
+++ b/local.c
@@ -91,6 +91,7 @@ void localConfig(FILE *cert, FILE *priv, FILE *ca, bool require) {
 	if (error) {
 		errx(EX_CONFIG, "tls_config_set_key_mem: %s", tls_config_error(config));
 	}
+	explicit_bzero(buf, len);
 	free(buf);
 
 	if (ca) {
-- 
cgit 1.4.1

onchange='this.form.submit();'>
<option value='154f4d27ea5a74238f5fa8178858fbf626d51b85'>this commit</option>
<optgroup label='branches'><option value='master' selected='selected'>master</option>
</optgroup></select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>dontfiles
</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/src/'>summary</a> <a href='/src/refs/?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21'>refs</a> <a class='active' href='/src/log/home/.config?follow=1'>log</a> <a href='/src/tree/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21'>tree</a> <a href='/src/commit/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;follow=1'>commit</a> <a href='/src/diff/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;follow=1'>diff</a></td><td class='form'><form class='right' method='get' action='/src/log/home/.config'>
<input type='hidden' name='id' value='db83f2c4229a987803b72e5e70cbc7ec796a6a21'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/src/log/?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;follow=1'>root</a>/<a href='/src/log/home?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;follow=1'>home</a>/<a href='/src/log/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;follow=1'>.config</a> (<a href='/src/log/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21'>unfollow</a>)</div><div class='content'><table class='list nowrap'><tr class='nohover'><th></th><th class='left'>Commit message (<a href='/src/log/home/.config?id=db83f2c4229a987803b72e5e70cbc7ec796a6a21&amp;showmsg=1&amp;follow=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2018-07-30 15:14:49 -0400'>2018-07-30</span></td><td><a href='/src/commit/gfx/x11.c?id=7538237e9cc26f788ba0fd65c97019ef250b5004&amp;follow=1'>Move graphical programs out of bin</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-30 14:05:00 -0400'>2018-07-30</span></td><td><a href='/src/commit/txt/music.md?id=2ad65b79344a602f2f7ab3bbd77b1ea88b2f9f36&amp;follow=1'>Add Neckbeard Deathcamp</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-29 21:46:28 -0400'>2018-07-29</span></td><td><a href='/src/commit/bin/dtch.c?id=f4a7e473cddd8a12240efb2b7c890214def17060&amp;follow=1'>Just print rs1 in dtch restoreTerm</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-29 20:56:12 -0400'>2018-07-29</span></td><td><a href='/src/commit/bin/dtch.c?id=23be20872761de1f0c673b875ee43ac60ed76d37&amp;follow=1'>Fix dtch cmsg size</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-25 16:40:23 -0400'>2018-07-25</span></td><td><a href='/src/commit/bin/modem.c?id=125630aeab8e576bdd87c5a66ea18d8b3f583797&amp;follow=1'>Fix cfmakeraw calls</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-23 20:11:48 -0400'>2018-07-23</span></td><td><a href='/src/commit/install.sh?id=cc394518318010846c0d2d79f4e41547d42cdf43&amp;follow=1'>Remove nasm from install</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-23 20:09:10 -0400'>2018-07-23</span></td><td><a href='/src/commit/home/.ssh/config?id=19425df67e6f01054068186a10a143893d84fd95&amp;follow=1'>Add monday.local to ssh</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-23 16:24:45 -0400'>2018-07-23</span></td><td><a href='/src/commit/bin/Makefile?id=4080d123c113cf70ae762986edfc9e2b8b92d817&amp;follow=1'>Restore LDLIBS alphabetical order</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-23 16:13:03 -0400'>2018-07-23</span></td><td><a href='/src/commit/bin/watch.c?id=5649f07fff728086dce6e1cdd22cbcdb91582986&amp;follow=1'>Use EV_SET in watch</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-23 16:03:52 -0400'>2018-07-23</span></td><td><a href='/src/commit/bin/Makefile?id=2b34181c8af58b3183c66eb91c272902e6297664&amp;follow=1'>Link with -lcurses</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-22 18:28:00 -0400'>2018-07-22</span></td><td><a href='/src/commit/bin/scheme.c?id=8a1de515f659ea84ae1cddbe341434e58579a085&amp;follow=1'>Fix scheme indentation</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-16 14:14:52 -0400'>2018-07-16</span></td><td><a href='/src/commit/bin/glitch.c?id=d5262930a4c91d1a4f021dc69056194818bc721d&amp;follow=1'>Add -m option to glitch</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-16 13:21:56 -0400'>2018-07-16</span></td><td><a href='/src/commit/bin/glitch.c?id=258589ad85c1d41ca9401b72ae22b5b8dd460e44&amp;follow=1'>malloc deflate buffer in glitch</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-16 13:17:07 -0400'>2018-07-16</span></td><td><a href='/src/commit/bin/pngo.c?id=5e031095fd01f98b7cd872aaa032dfde4908969a&amp;follow=1'>malloc the deflate buffer in pngo</a></td><td>June McEnroe</td></tr>
<tr><td><span title='2018-07-05 18:34:09 -0400'>2018-07-05</span></td><td><a href='/src/commit/txt/music.md?id=2891d7c84a185fd26928e42c62242ea1a1dd7327&amp;follow=1'>Add shed blood</a></td><td>June McEnroe