From 750be17704654f93a16ef4fc36405ba3abb5f493 Mon Sep 17 00:00:00 2001 From: Curtis McEnroe Date: Thu, 31 Oct 2019 17:45:02 -0400 Subject: Clear passwords from memory with memset_s --- bounce.c | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'bounce.c') diff --git a/bounce.c b/bounce.c index aa1cecc..cc6b34f 100644 --- a/bounce.c +++ b/bounce.c @@ -14,6 +14,8 @@ * along with this program. If not, see . */ +#define __STDC_WANT_LIB_EXT1__ 1 + #include #include #include @@ -107,8 +109,8 @@ int main(int argc, char *argv[]) { bool insecure = false; const char *host = NULL; const char *port = "6697"; - const char *pass = NULL; - const char *auth = NULL; + char *pass = NULL; + char *auth = NULL; const char *nick = NULL; const char *user = NULL; const char *real = NULL; @@ -195,6 +197,9 @@ int main(int argc, char *argv[]) { int server = serverConnect(insecure, host, port); stateLogin(pass, auth, nick, user, real); + if (pass) memset_s(pass, strlen(pass), 0, strlen(pass)); + if (auth) memset_s(auth, strlen(auth), 0, strlen(auth)); + while (!stateReady()) serverRecv(); serverFormat("AWAY :%s\r\n", away); if (join) serverFormat("JOIN :%s\r\n", join); -- cgit 1.4.1