Explicitly blank password before free

This stops the password from potentially being exposed after archive freed It does not stop the password being exposed whilst the archive is open
chris-y · Aug 16, 2023 · 7f338ca · 7f338ca
1 parent 8068251
commit 7f338ca
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/xad.c b/src/xad.c
@@ -69,6 +69,9 @@ static void xad_free_pw(void *awin)
 	struct xad_userdata *xu = (struct xad_userdata *)window_get_archive_userdata(awin);
 
 	if(xu->pw) {
+		for(int i = 0; i < strlen(xu->pw); i++)
+			xu->pw[i] = '\0';
+
 		FreeVec(xu->pw);
 		xu->pw = NULL;
 	}