From 739016719e25b36fb9a68d383ff5cdc71bc0b8c5 Mon Sep 17 00:00:00 2001
From: Matthias Andree <matthias.andree@gmx.de>
Date: Mon, 27 Nov 2006 02:49:53 +0000
Subject: Enshroud RPOP password in local logs.

svn path=/branches/BRANCH_6-3/; revision=4967
---
 pop3.c | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/pop3.c b/pop3.c
index e3b06656..961692a5 100644
--- a/pop3.c
+++ b/pop3.c
@@ -640,8 +640,12 @@ static int pop3_getauth(int sock, struct query *ctl, char *greeting)
 	break;
 
     case P_RPOP:
-	if ((ok = gen_transact(sock,"USER %s", ctl->remotename)) == 0)
+	if ((ok = gen_transact(sock,"USER %s", ctl->remotename)) == 0) {
+	    strlcpy(shroud, ctl->password, sizeof(shroud));
 	    ok = gen_transact(sock, "RPOP %s", ctl->password);
+	    memset(shroud, 0x55, sizeof(shroud));
+	    shroud[0] = '\0';
+	}
 	break;
 
     default:
-- 
cgit v1.2.3