Since there may be sensitive data in the setting values, wipe the value memory before freeing. --- ell/settings.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ell/settings.c b/ell/settings.c index a556144..8e67fa3 100644 --- a/ell/settings.c +++ b/ell/settings.c @@ -61,6 +61,7 @@ static void setting_destroy(void *data) struct setting_data *pair = data; l_free(pair->key); + memset(pair->value, 0, strlen(pair->value)); l_free(pair->value); l_free(pair); } -- 2.14.1