- icegridadmin when using username/password authentication now zeros

  the entire password after use.
- Fixed memset of password in the IceSSL impl.

1 files changed, 4 insertions, 1 deletions

diff --git a/cpp/src/IceSSL/Instance.cpp b/cpp/src/IceSSL/Instance.cpp
index 66f148da791..1f0897a0a9d 100644
--- a/cpp/src/IceSSL/Instance.cpp
+++ b/cpp/src/IceSSL/Instance.cpp
@@ -123,7 +123,10 @@ IceSSL_opensslPasswordCallback(char* buf, int size, int flag, void* userData)
     strncpy(buf, passwd.c_str(), sz);
     buf[sz] = '\0';
 
-    memset(&passwd[0], 0, static_cast<size_t>(passwd.size()));
+    for(string::iterator p = passwd.begin(); p != passwd.end(); ++p)
+    {
+        *p = '\0';
+    } 
 
     return sz;
 }