--- pgp/src/passwd.c	2018/04/24 16:42:24	1.1.1.6
+++ pgp/src/passwd.c	2018/04/24 16:43:42	1.1.1.7
@@ -78,7 +78,8 @@ int GetHashedPassPhrase(char *hash, bool
 		getstring(keystr2,MAXKEYLEN-1,!noecho);
 		if (strcmp(keystr1,keystr2)==0)
 			break;
-		fprintf(pgpout,LANG("\n\007Error: Pass phrases were different.  Try again."));
+		fprintf(pgpout,
+LANG("\n\007Error: Pass phrases were different.  Try again."));
 		memset(keystr2, 0, sizeof(keystr2));
 	}
 	if (noecho && (filter_mode || quietmode))
@@ -91,6 +92,7 @@ int GetHashedPassPhrase(char *hash, bool
 	/* This will have to change for EBCDIC */
 	hashpass (keystr1, strlen(keystr1), (byte *) hash);
 	memset(keystr1, 0, sizeof(keystr1));
+	memset(keystr2, 0, sizeof(keystr2));
 	return 1;
 } /* GetHashedPassPhrase */