also erase and free the temp key

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1760 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/kdb/verify_mky.c b/src/lib/kdb/verify_mky.c
index dd26b96c5517052bb660711b5ea7bb1d8091365b..cf205afbb982a65583a441a6446147ea3056015e 100644 (file)
--- a/src/lib/kdb/verify_mky.c
+++ b/src/lib/kdb/verify_mky.c
@@ -69,6 +69,8 @@ krb5_encrypt_block *eblock;
     } else
        retval = krb5_finish_key(eblock);
 
+    memset((char *)tempkey.contents, 0, tempkey.length);
+    xfree(tempkey.contents);
     krb5_db_free_principal(&master_entry, nprinc);
     
     return retval;