[dovecot-cvs] dovecot/src/login client.c,1.9,1.10

cras at procontrol.fi cras at procontrol.fi
Wed Nov 6 08:23:52 EET 2002


Update of /home/cvs/dovecot/src/login
In directory danu:/tmp/cvs-serv7700

Modified Files:
	client.c 
Log Message:
More password clearing.



Index: client.c
===================================================================
RCS file: /home/cvs/dovecot/src/login/client.c,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -d -r1.9 -r1.10
--- client.c	28 Oct 2002 04:18:26 -0000	1.9
+++ client.c	6 Nov 2002 06:23:49 -0000	1.10
@@ -147,6 +147,7 @@
 static int client_command_execute(Client *client, char *line)
 {
 	char *cmd;
+	int ret;
 
 	cmd = get_next_arg(&line);
 	str_ucase(cmd);
@@ -156,10 +157,18 @@
 
 		user = get_next_arg(&line);
 		pass = get_next_arg(&line);
-		return cmd_login(client, user, pass);
+		ret = cmd_login(client, user, pass);
+
+		memset(pass, 0, strlen(pass));
+		return ret;
+	}
+	if (strcmp(cmd, "AUTHENTICATE") == 0) {
+		char *data = get_next_arg(&line);
+
+		ret = cmd_authenticate(client, data);
+		memset(data, 0, strlen(data));
+		return ret;
 	}
-	if (strcmp(cmd, "AUTHENTICATE") == 0)
-		return cmd_authenticate(client, get_next_arg(&line));
 	if (strcmp(cmd, "CAPABILITY") == 0)
 		return cmd_capability(client);
 	if (strcmp(cmd, "STARTTLS") == 0)




More information about the dovecot-cvs mailing list