[dovecot-cvs] dovecot/src/login client.c,1.9,1.10
cras at procontrol.fi
cras at procontrol.fi
Wed Nov 6 08:23:52 EET 2002
Update of /home/cvs/dovecot/src/login
In directory danu:/tmp/cvs-serv7700
Modified Files:
client.c
Log Message:
More password clearing.
Index: client.c
===================================================================
RCS file: /home/cvs/dovecot/src/login/client.c,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -d -r1.9 -r1.10
--- client.c 28 Oct 2002 04:18:26 -0000 1.9
+++ client.c 6 Nov 2002 06:23:49 -0000 1.10
@@ -147,6 +147,7 @@
static int client_command_execute(Client *client, char *line)
{
char *cmd;
+ int ret;
cmd = get_next_arg(&line);
str_ucase(cmd);
@@ -156,10 +157,18 @@
user = get_next_arg(&line);
pass = get_next_arg(&line);
- return cmd_login(client, user, pass);
+ ret = cmd_login(client, user, pass);
+
+ memset(pass, 0, strlen(pass));
+ return ret;
+ }
+ if (strcmp(cmd, "AUTHENTICATE") == 0) {
+ char *data = get_next_arg(&line);
+
+ ret = cmd_authenticate(client, data);
+ memset(data, 0, strlen(data));
+ return ret;
}
- if (strcmp(cmd, "AUTHENTICATE") == 0)
- return cmd_authenticate(client, get_next_arg(&line));
if (strcmp(cmd, "CAPABILITY") == 0)
return cmd_capability(client);
if (strcmp(cmd, "STARTTLS") == 0)
More information about the dovecot-cvs
mailing list