1 files changed, 3 insertions, 3 deletions

diff --git a/auth2-passwd.c b/auth2-passwd.c
index 21bc5047d..707680cd0 100644
--- a/auth2-passwd.c
+++ b/auth2-passwd.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: auth2-passwd.c,v 1.10 2013/05/17 00:13:13 djm Exp $ */
+/* $OpenBSD: auth2-passwd.c,v 1.11 2014/02/02 03:44:31 djm Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -59,7 +59,7 @@ userauth_passwd(Authctxt *authctxt)
         if (change) {
                 /* discard new password from packet */
                 newpass = packet_get_string(&newlen);
-                memset(newpass, 0, newlen);
+                explicit_bzero(newpass, newlen);
                 free(newpass);
         }
         packet_check_eom();
@@ -68,7 +68,7 @@ userauth_passwd(Authctxt *authctxt)
                 logit("password change not supported");
         else if (PRIVSEP(auth_password(authctxt, password)) == 1)
                 authenticated = 1;
-        memset(password, 0, len);
+        explicit_bzero(password, len);
         free(password);
         return authenticated;
 }