GNU bug report logs - #30186
27.0.50; Password is not hidden in read-passwd

Previous Next

Full log

View this message in rfc822 format

From: Eli Zaretskii <eliz <at> gnu.org>
To: Juri Linkov <juri <at> linkov.net>
Cc: 30186 <at> debbugs.gnu.org
Subject: bug#30186: 27.0.50; Password is not hidden in read-passwd
Date: Sun, 21 Jan 2018 17:59:19 +0200

> From: Juri Linkov <juri <at> linkov.net>
> Date: Sat, 20 Jan 2018 23:29:35 +0200
> 
> This is a regression and a security flaw.
> 
> Reading a password with ‘read-passwd’ doesn't hide inserted characters
> anymore as it used to do in older versions.
> 
> When the user has such customization:
> 
>   (custom-set-variables
>    '(yank-excluded-properties t))
> 
> evaluating
> 
>   (read-passwd "Prompt: ")
> 
> and yanking a password to the minibuffer with 'C-y' doesn't hide it
> as it did in Emacs 25.
> 
> This can be traced down to ‘remove-yank-excluded-properties’
> where ‘set-text-properties’ used to leave ‘display’ properties
> (with ‘.’ over inserted characters) in the minibuffer.

Can you spot the commit which causes this, or bisect to find it?

Thanks.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.