Zero out server password after sending

Also send it directly using ircSend to avoid copying it and logging
it to <debug>.
weechat-hashes
C. McEnroe 2021-07-04 16:55:12 -04:00
parent 9559fe9d23
commit c76d76205f
1 changed files with 7 additions and 2 deletions

9
chat.c
View File

@ -150,7 +150,7 @@ int main(int argc, char *argv[]) {
bool log = false; bool log = false;
bool sasl = false; bool sasl = false;
const char *pass = NULL; char *pass = NULL;
const char *nick = NULL; const char *nick = NULL;
const char *user = NULL; const char *user = NULL;
const char *real = NULL; const char *real = NULL;
@ -344,7 +344,12 @@ int main(int argc, char *argv[]) {
} }
#endif #endif
if (pass) ircFormat("PASS :%s\r\n", pass); if (pass) {
ircFormat("PASS :");
ircSend(pass, strlen(pass));
ircFormat("\r\n");
explicit_bzero(pass, strlen(pass));
}
if (sasl) ircFormat("CAP REQ :sasl\r\n"); if (sasl) ircFormat("CAP REQ :sasl\r\n");
ircFormat("CAP LS\r\n"); ircFormat("CAP LS\r\n");
ircFormat("NICK :%s\r\n", nick); ircFormat("NICK :%s\r\n", nick);