===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/signify/signify.c,v
retrieving revision 1.126
retrieving revision 1.127
diff -c -r1.126 -r1.127
*** src/usr.bin/signify/signify.c	2016/10/06 22:38:25	1.126
--- src/usr.bin/signify/signify.c	2017/04/18 02:20:50	1.127
***************
*** 1,4 ****
! /* $OpenBSD: signify.c,v 1.126 2016/10/06 22:38:25 espie Exp $ */
  /*
   * Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
   *
--- 1,4 ----
! /* $OpenBSD: signify.c,v 1.127 2017/04/18 02:20:50 deraadt Exp $ */
  /*
   * Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
   *
***************
*** 244,251 ****
  	fd = xopen(filename, O_CREAT|oflags|O_NOFOLLOW|O_WRONLY, mode);
  	header = createheader(comment, buf, buflen);
  	writeall(fd, header, strlen(header), filename);
! 	explicit_bzero(header, strlen(header));
! 	free(header);
  	close(fd);
  }
  
--- 244,250 ----
  	fd = xopen(filename, O_CREAT|oflags|O_NOFOLLOW|O_WRONLY, mode);
  	header = createheader(comment, buf, buflen);
  	writeall(fd, header, strlen(header), filename);
! 	freezero(header, strlen(header));
  	close(fd);
  }