Merge pull request P-H-C#129 from technion/uninitialized

Properly zero pwd pointed before using it.
Sprunglesonthehub · Apr 11, 2016 · 26c2724 · 26c2724
2 parents a42a5b1 + 69a13b4
commit 26c2724
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/argon2.c b/src/argon2.c
@@ -226,6 +226,8 @@ int argon2_verify(const char *encoded, const void *pwd, const size_t pwdlen,
     ctx.free_cbk = NULL;
     ctx.secret = NULL;
     ctx.secretlen = 0;
+    ctx.pwdlen = 0;
+    ctx.pwd = NULL;
     ctx.ad = malloc(ctx.adlen);
     ctx.salt = malloc(ctx.saltlen);
     ctx.out = malloc(ctx.outlen);