From 4a5d1f4f461a7f007dd2094a2930d262fb0628e0 Mon Sep 17 00:00:00 2001
From: Mounir IDRASSI <mounir.idrassi@idrix.fr>
Date: Mon, 22 Jun 2020 10:38:59 +0200
Subject: Linux/MacOSX: explicitely clear saved password from memory at last
 step of volume creation wizard

---
 src/Main/Forms/VolumeCreationWizard.cpp | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'src/Main')

diff --git a/src/Main/Forms/VolumeCreationWizard.cpp b/src/Main/Forms/VolumeCreationWizard.cpp
index 572523e7..dd5c4dbf 100644
--- a/src/Main/Forms/VolumeCreationWizard.cpp
+++ b/src/Main/Forms/VolumeCreationWizard.cpp
@@ -58,6 +58,7 @@ namespace VeraCrypt
 		SelectedVolumeHostType (VolumeHostType::File),
 		SelectedVolumeType (VolumeType::Normal),
 		Pim (0),
+		OuterPim (0),
 		SectorSize (0),
 		VolumeSize (0)
 	{
@@ -1082,6 +1083,12 @@ namespace VeraCrypt
 			Creator.reset();
 			SetCancelButtonText (L"");
 
+			// clear saved credentials
+			Password.reset();
+			OuterPassword.reset();
+			burn (&Pim, sizeof (Pim));
+			burn (&OuterPim, sizeof (OuterPim));
+
 			return Step::VolumeHostType;
 
 		case Step::OuterVolumeContents:
-- 
cgit v1.2.3