shithub: drawterm

Download patch

ref: 7ba254afe3300e88a1692ffcb72af34d025618f8
parent: 566f277947682ea7513fa7ff91320607d2ff63f0
author: cinap_lenrek <cinap_lenrek@felloff.net>
date: Wed Jun 24 12:42:41 EDT 2020

cpu: remove /env/PASS to avoid leaking password to the remote system

--- a/cpu.c	Fri Jun 19 17:18:15 2020
+++ b/cpu.c	Wed Jun 24 12:42:41 2020
@@ -263,7 +263,8 @@
 	char *s;
 
 	user = getenv("USER");
-	pass = getenv("PASS");
+	if((pass = getenv("PASS")) != nil)
+		remove("/env/PASS");
 	host = getenv("cpu");
 	authserver = getenv("auth");