Przeglądaj źródła

Do not clear the password before encryption

svn path=/trunk/mcs/; revision=72473
Marek Habersack 19 lat temu
rodzic
commit
89e5d0fc4e

+ 5 - 0
mcs/class/System.Web/System.Web.Security/ChangeLog

@@ -1,3 +1,8 @@
+2007-02-08  Marek Habersack  <[email protected]>
+
+	* MembershipProvider.cs: Do not clear the password before
+	encrypting it. 
+
 2007-01-20  Miguel de Icaza  <[email protected]>
 
 	* SqlRoleProvider.cs: comment out unused code.

+ 0 - 1
mcs/class/System.Web/System.Web.Security/MembershipProvider.cs

@@ -125,7 +125,6 @@ namespace System.Web.Security
 			byte [] iv = new byte [SALT_BYTES];
 
 			Array.Copy (password, 0, iv, 0, Math.Min(password.Length, SALT_BYTES));
-			Array.Clear (password, 0, password.Length);
 
 			using (SymmetricAlgorithm alg = GetAlg (out decryptionKey)) {
 				using (ICryptoTransform encryptor = alg.CreateEncryptor (decryptionKey, iv)) {