From: Andrej Kacian <ticho@claws-mail.org>
Date: Sat, 2 Apr 2016 15:07:35 +0000 (+0200)
Subject: RSSyl: zero out password variables after migration to password store
X-Git-Tag: 3.14.0~124
X-Git-Url: http://git.claws-mail.org/?p=claws.git;a=commitdiff_plain;h=497cfad48dfa9d97b204c278c51821d30035edaf;hp=08ed4047b275f8ad702fb964a5218e95d66ea821

RSSyl: zero out password variables after migration to password store
---

diff --git a/src/plugins/rssyl/rssyl.c b/src/plugins/rssyl/rssyl.c
index 22f2260b6..139f5af0f 100644
--- a/src/plugins/rssyl/rssyl.c
+++ b/src/plugins/rssyl/rssyl.c
@@ -290,7 +290,10 @@ static void rssyl_item_set_xml(Folder *folder, FolderItem *item, XMLTag *tag)
 		if (!strcmp(attr->name, "auth_pass")) {
 			gsize len = 0;
 			guchar *pwd = g_base64_decode(attr->value, &len);
+			memset(attr->value, 0, strlen(attr->value));
 			rssyl_passwd_set(ritem, (gchar *)pwd);
+			memset(pwd, 0, strlen(pwd));
+			g_free(pwd);
 		}
 		/* (str) Official title */
 		if( !strcmp(attr->name, "official_title")) {