[Commits] [SCM] claws branch, master, updated. 3.13.2-103-g497cfad

[ticho at claws-mail.org]

The branch, master has been updated
       via  497cfad48dfa9d97b204c278c51821d30035edaf (commit)
      from  08ed4047b275f8ad702fb964a5218e95d66ea821 (commit)

Summary of changes:
 src/plugins/rssyl/rssyl.c |    3 +++
 1 file changed, 3 insertions(+)


- Log -----------------------------------------------------------------
commit 497cfad48dfa9d97b204c278c51821d30035edaf
Author: Andrej Kacian <ticho at claws-mail.org>
Date:   Sat Apr 2 17:07:35 2016 +0200

    RSSyl: zero out password variables after migration to password store

diff --git a/src/plugins/rssyl/rssyl.c b/src/plugins/rssyl/rssyl.c
index 22f2260..139f5af 100644
--- a/src/plugins/rssyl/rssyl.c
+++ b/src/plugins/rssyl/rssyl.c
@@ -290,7 +290,10 @@ static void rssyl_item_set_xml(Folder *folder, FolderItem *item, XMLTag *tag)
 		if (!strcmp(attr->name, "auth_pass")) {
 			gsize len = 0;
 			guchar *pwd = g_base64_decode(attr->value, &len);
+			memset(attr->value, 0, strlen(attr->value));
 			rssyl_passwd_set(ritem, (gchar *)pwd);
+			memset(pwd, 0, strlen(pwd));
+			g_free(pwd);
 		}
 		/* (str) Official title */
 		if( !strcmp(attr->name, "official_title")) {

-----------------------------------------------------------------------


hooks/post-receive
-- 
Claws Mail