* be more paranoid about the previous content of passvoid buffers

[citadel.git] / citadel / user_ops.c

diff --git a/citadel/user_ops.c b/citadel/user_ops.c
index 642972164ca7f9d9f5cf3b235294458f2b9764da..26bcb0c7205fe596ab5302616f6291bdb0fd94b7 100644 (file)
--- a/citadel/user_ops.c
+++ b/citadel/user_ops.c
@@ -936,6 +936,7 @@ void cmd_pass(char *buf)
        char password[256];
        int a;
 
+       memset(password, 0, sizeof(password));
        extract_token(password, buf, 0, '|', sizeof password);
        a = CtdlTryPassword(password);