From: Nicolas Williams <nico@twosigma.com>
Date: Tue, 20 Jan 2026 22:05:31 +0000 (-0600)
Subject: kdc: Fix memset_s() calls (fix #1296)
X-Git-Tag: archive/raspbian/2%4.23.5+dfsg-1+rpi1^2~3
X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/%22/%22http:/www.example.com/cgi/%22?a=commitdiff_plain;h=94a75f9e6c08b88513233e366a0694ca11b90f11;p=samba.git

kdc: Fix memset_s() calls (fix #1296)

Origin: upstream, https://github.com/heimdal/heimdal/commit/112a82dd2596e228388c50b4c71b3aa816b86add
Forwarded: not-needed


Gbp-Pq: Name heimdal-kdc-fix-memset_s-calls-1296.patch
---

diff --git a/third_party/heimdal/kdc/fast.c b/third_party/heimdal/kdc/fast.c
index 235cdc5e..7c0d1fd0 100644
--- a/third_party/heimdal/kdc/fast.c
+++ b/third_party/heimdal/kdc/fast.c
@@ -930,8 +930,8 @@ _kdc_free_fast_state(KDCFastState *state)
 	PA_DATA *pa = &state->fast_state.val[i];
 
 	if (pa->padata_value.data)
-	    memset_s(pa->padata_value.data, 0,
-		     pa->padata_value.length, pa->padata_value.length);
+	    memset_s(pa->padata_value.data, pa->padata_value.length,
+		     0, pa->padata_value.length);
     }
     free_KDCFastState(state);
 }
diff --git a/third_party/heimdal/kdc/krb5tgs.c b/third_party/heimdal/kdc/krb5tgs.c
index 07fdcca3..d29155a7 100644
--- a/third_party/heimdal/kdc/krb5tgs.c
+++ b/third_party/heimdal/kdc/krb5tgs.c
@@ -2304,7 +2304,7 @@ out:
     }
     free_LastReq(&r->ek.last_req);
     if (r->et.key.keyvalue.data) {
-	memset_s(r->et.key.keyvalue.data, 0, r->et.key.keyvalue.length,
+	memset_s(r->et.key.keyvalue.data, r->et.key.keyvalue.length, 0,
 		 r->et.key.keyvalue.length);
     }
     free_EncryptionKey(&r->et.key);