readpassphrase(3) buffer needs explicit_bzero(3) on error?

[Alejandro Colomar]

Hi,






Also, adding explicit_bzero(3) to SEE ALSO might be desirable.

Cheers,

Alex

--
<http://www.alejandro-colomar.es/>

I'd like to clarify if it's necessary to clear the buffer in the case that the function failed. Most errors seem to be clearly triggered before the first byte is written to the buffer: EINVAL, EIO, EMFILE, ENFILE, ENOTTY. But there is one, EINTR, which is not clear if there was any data written or not. I think this should be clarified, for such a sensitive function.

OpenPGP_signature
Description: OpenPGP digital signature