From 0c5f34eeb66533b6cb7d8c2451f4e94e0eabd083 Mon Sep 17 00:00:00 2001
From: deraadt <deraadt@openbsd.org>
Date: Mon, 17 Apr 2017 21:55:20 +0000
Subject: [PATCH] use freezero()

---
 lib/libskey/skeylogin.c | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/lib/libskey/skeylogin.c b/lib/libskey/skeylogin.c
index e63412c6f6d..13e39007a33 100644
--- a/lib/libskey/skeylogin.c
+++ b/lib/libskey/skeylogin.c
@@ -10,7 +10,7 @@
  *
  * S/Key verification check, lookups, and authentication.
  *
- * $OpenBSD: skeylogin.c,v 1.60 2017/03/20 21:11:21 tb Exp $
+ * $OpenBSD: skeylogin.c,v 1.61 2017/04/17 21:55:20 deraadt Exp $
  */
 
 #ifdef	QUOTA
@@ -474,8 +474,7 @@ skey_fakeprompt(char *username, char *skeyprompt)
 		/* Sequence number */
 		ptr = ((up[2] + up[3]) % 99) + 1;
 
-		explicit_bzero(up, 20); /* SHA1 specific */
-		free(up);
+		freezero(up, 20); /* SHA1 specific */
 
 		(void)snprintf(skeyprompt, SKEY_MAX_CHALLENGE,
 		    "otp-%.*s %d %.*s", SKEY_MAX_HASHNAME_LEN,
-- 
2.20.1