--- ssmtp.c	2008-09-26 02:13:48.000000000 -0600
+++ ssmtp.c.new	2008-09-26 02:15:41.000000000 -0600
@@ -1056,7 +1042,8 @@
 				}
 			}
 			else if(strcasecmp(p, "AuthPass") == 0 && !auth_pass) {
-				if((auth_pass = strdup(q)) == (char *)NULL) {
+				auth_pass = firsttok(&rightside, " \n\t");
+				if(auth_pass  == (char *)NULL) {
 					die("parse_config() -- strdup() failed");
 				}