===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/encrypt/encrypt.c,v
retrieving revision 1.45
retrieving revision 1.46
diff -u -r1.45 -r1.46
--- src/usr.bin/encrypt/encrypt.c	2016/09/04 15:36:13	1.45
+++ src/usr.bin/encrypt/encrypt.c	2017/05/03 09:51:39	1.46
@@ -1,4 +1,4 @@
-/*	$OpenBSD: encrypt.c,v 1.45 2016/09/04 15:36:13 tb Exp $	*/
+/*	$OpenBSD: encrypt.c,v 1.46 2017/05/03 09:51:39 mestre Exp $	*/
 
 /*
  * Copyright (c) 1996, Jason Downs.  All rights reserved.
@@ -134,6 +134,7 @@
 				err(1, "readpassphrase");
 			print_passwd(string, operation, extra);
 			(void)fputc('\n', stdout);
+			explicit_bzero(string, sizeof(string));
 		} else {
 			size_t len;
 			/* Encrypt stdin to stdout. */