GNU bug report logs - #5664
view-lossage may show passwords and sensitive information

Previous Next

Package: emacs;

Reported by: Andreas Roehler <andreas.roehler <at> online.de>

Date: Mon, 1 Mar 2010 08:17:02 UTC

Severity: normal

Done: Michael Albinus <michael.albinus <at> gmx.de>

Bug is archived. No further changes may be made.

Full log

Message #13 received at 5664 <at> debbugs.gnu.org (full text, mbox):

From: Chong Yidong <cyd <at> stupidchicken.com>
To: Andreas Roehler <andreas.roehler <at> online.de>
Cc: 5664 <at> debbugs.gnu.org
Subject: Re: 23.1.92; view-lossage
Date: Sat, 06 Mar 2010 15:18:44 -0500

Andreas Roehler <andreas.roehler <at> online.de> writes:

> emacs -q
> M-x shell
> /bin/su at shell prompt
>
> prompt for PW arrives, when PW putted in, its visible at the screen
>
> root-shell (bash) arrives
>
> M-x report-emacs-bug
>
> View lossage displays root-password, replaced for this report by
> MY-PW-SHOWN-HERE

I'm afraid I can't reproduce this.  One possibility is that you are
using a locale where the password prompt is given in a language that
comint-watch-for-password-prompt does not recognize.  This is a known
issue; customize comint-password-prompt-regexp to add the
locale-dependent password prompt(s) to the list of recognized prompts.
This bug report was last modified 11 years and 120 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.