# HG changeset patch
# User Matt Johnston <matt@ucc.asn.au>
# Date 1091983451 0
# Node ID a48ba599292a16b35b213f31993570a05dd54a11
# Parent  0fe267cc9dee14dadd70d61d27886cdc87c06a38
burn the buffer a bit earlier

diff -r 0fe267cc9dee -r a48ba599292a svr-authpasswd.c
--- a/svr-authpasswd.c	Sun Aug 08 16:41:26 2004 +0000
+++ b/svr-authpasswd.c	Sun Aug 08 16:44:11 2004 +0000
@@ -87,6 +87,8 @@
 
 	/* the first bytes of passwdcrypt are the salt */
 	testcrypt = crypt((char*)password, passwdcrypt);
+	m_burn(password, passwordlen);
+	m_free(password);
 
 	if (strcmp(testcrypt, passwdcrypt) == 0) {
 		/* successful authentication */
@@ -101,8 +103,6 @@
 		send_msg_userauth_failure(0, 1);
 	}
 
-	m_burn(password, passwordlen);
-	m_free(password);
 }
 
 #endif /* DROPBEAR_PASSWORD_AUTH */