Substitute the ucf/show_diff DIFF variable contents to protect sensitive data

> reset diff question after use so contents are not written to disk

Unfortunately this is not enough (or even needed): the sensitive
data is not stored in the value of ucf/show_diff, but in the DIFF
variable associated with it.

Closes: Bug#511893

Author:    Niko Tyni <ntyni@debian.org>
Signed-off-by: Manoj Srivastava <srivasta@debian.org>

1 files changed, 1 insertions, 0 deletions

diff --git a/ucf b/ucf
index 883897b..b2f60da 100755
--- a/ucf
+++ b/ucf
@@ -78,6 +78,7 @@ show_diff() {
 	# may contain sensitive information, so clear
 	# immediatly after use so it is never written
 	# to disk
+	db_subst $templ DIFF ""
 	db_reset $templ 
 	db_capb
     else