From: Chris Duncan <chris@zoso.dev>
Date: Thu, 3 Jul 2025 16:57:25 +0000 (-0700)
Subject: Zero out password if put throws.
X-Git-Tag: v0.10.5~136^2~20
X-Git-Url: https://git.codecow.com/?a=commitdiff_plain;h=512cb425b31ba3364cffd61de331fcf5473b5bc7;p=libnemo.git

Zero out password if put throws.
---

diff --git a/src/lib/workers/safe.ts b/src/lib/workers/safe.ts
index 4ade245..e30c2c0 100644
--- a/src/lib/workers/safe.ts
+++ b/src/lib/workers/safe.ts
@@ -88,6 +88,7 @@ export class Safe extends WorkerInterface {
 	*/
 	static async put (name: string, password: Uint8Array, data: any): Promise<boolean> {
 		if (this.#storage.getItem(name)) {
+			password.fill(0)
 			throw new Error(ERR_MSG)
 		}
 		return this.overwrite(name, password, data)