Mercurial > pidgin

changeset 21286:b2e646507c18

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Use only the first 16 characters of the password, and plug a leak. Fixes #3320, thanks phroggie
author Ka-Hing Cheung <khc@hxbc.us>
date Sat, 10 Nov 2007 05:20:46 +0000
parents 78f3361f5e62
children fbb044f7af3d 13cc55dff880 38cc722159ff
files libpurple/protocols/msn/nexus.c
diffstat 1 files changed, 2 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/libpurple/protocols/msn/nexus.c	Sat Nov 10 05:16:58 2007 +0000
+++ b/libpurple/protocols/msn/nexus.c	Sat Nov 10 05:20:46 2007 +0000
@@ -148,7 +148,7 @@
 
 	/*prepare the Windows Live ID authentication token*/
 	username = g_strdup(purple_account_get_username(session->account));
-	password = g_strdup(purple_connection_get_password(session->account->gc));
+	password = g_strndup(purple_connection_get_password(session->account->gc), 16);
 
 	lc =	(char *)g_hash_table_lookup(nexus->challenge_data, "lc");
 	id =	(char *)g_hash_table_lookup(nexus->challenge_data, "id");
@@ -212,6 +212,7 @@
 	g_free(rst3_str);
 #endif
 	g_free(fs);
+	g_free(password);
 
 	soap = msn_soap_message_new(NULL, xmlnode_from_str(tail, -1));
 	g_free(tail);