Deuce: You'll want to free() that.

src/sbbs3/js_bbs.cpp

@@ -1693,6 +1693,7 @@ js_login(JSContext *cx, uintN argc, jsval *arglist)
 	rc=JS_SUSPENDREQUEST(cx);
 	JS_SET_RVAL(cx, arglist, BOOLEAN_TO_JSVAL(sbbs->login(name,pw)==LOGIC_TRUE ? JS_TRUE:JS_FALSE));
 	JS_RESUMEREQUEST(cx, rc);
+	free(pw);
 	return(JS_TRUE);
 }