From 497cfad48dfa9d97b204c278c51821d30035edaf Mon Sep 17 00:00:00 2001
From: Andrej Kacian <ticho@claws-mail.org>
Date: Sat, 2 Apr 2016 17:07:35 +0200
Subject: [PATCH] RSSyl: zero out password variables after migration to
 password store

---
 src/plugins/rssyl/rssyl.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/plugins/rssyl/rssyl.c b/src/plugins/rssyl/rssyl.c
index 22f2260b6..139f5af0f 100644
--- a/src/plugins/rssyl/rssyl.c
+++ b/src/plugins/rssyl/rssyl.c
@@ -290,7 +290,10 @@ static void rssyl_item_set_xml(Folder *folder, FolderItem *item, XMLTag *tag)
 		if (!strcmp(attr->name, "auth_pass")) {
 			gsize len = 0;
 			guchar *pwd = g_base64_decode(attr->value, &len);
+			memset(attr->value, 0, strlen(attr->value));
 			rssyl_passwd_set(ritem, (gchar *)pwd);
+			memset(pwd, 0, strlen(pwd));
+			g_free(pwd);
 		}
 		/* (str) Official title */
 		if( !strcmp(attr->name, "official_title")) {
-- 
2.25.1