talons

commit 497cfad48dfa9d97b204c278c51821d30035edaf
parent 08ed4047b275f8ad702fb964a5218e95d66ea821
Author: Andrej Kacian <ticho@claws-mail.org>
Date:   Sat,  2 Apr 2016 17:07:35 +0200

RSSyl: zero out password variables after migration to password store

Diffstat:
M
src/plugins/rssyl/rssyl.c
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/src/plugins/rssyl/rssyl.c b/src/plugins/rssyl/rssyl.c
@@ -290,7 +290,10 @@ static void rssyl_item_set_xml(Folder *folder, FolderItem *item, XMLTag *tag)
 		if (!strcmp(attr->name, "auth_pass")) {
 			gsize len = 0;
 			guchar *pwd = g_base64_decode(attr->value, &len);
+			memset(attr->value, 0, strlen(attr->value));
 			rssyl_passwd_set(ritem, (gchar *)pwd);
+			memset(pwd, 0, strlen(pwd));
+			g_free(pwd);
 		}
 		/* (str) Official title */
 		if( !strcmp(attr->name, "official_title")) {