Browse Source

wipe pw before losing reference

[ci skip]
Sebastian Stenzel 3 years ago
parent
commit
85a5146d4b

+ 1 - 0
src/main/java/org/cryptomator/ui/keyloading/masterkeyfile/MasterkeyFileLoadingStrategy.java

@@ -100,6 +100,7 @@ public class MasterkeyFileLoadingStrategy implements KeyLoadingStrategy {
 	public boolean recoverFromException(MasterkeyLoadingFailedException exception) {
 		if (exception instanceof InvalidPassphraseException) {
 			this.wrongPassphrase = true;
+			Arrays.fill(passphrase, '\0');
 			this.passphrase = null;
 			return true; // reattempting key load
 		} else {