security-and-privacy/gnupg
security-and-privacy/gnupg
1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-01-21 14:47:03 +01:00
Code Activity

* ttyio.c (do_get): Assume that anything read from the user without

Browse Source 
echoing to the screen is sensitive and put it in secure memory.
Suggested by Benjamin Bennett.
This commit is contained in:
David Shaw 2007-02-01 04:21:07 +00:00
parent ef9e1b5fbc
commit 67c18b8c3c
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
util/ChangeLog
View File

@ -1,3 +1,9 @@
2007-01-31 David Shaw <dshaw@jabberwocky.com>
* ttyio.c (do_get): Assume that anything read from the user
without echoing to the screen is sensitive and put it in secure
memory. Suggested by Benjamin Bennett.
2006-12-14 Werner Koch <wk@g10code.com>
* http.c (http_wait_response): No more shutdown. Fixes bug#739.

3
util/ttyio.c
View File

@ -405,7 +405,8 @@ do_get( const char *prompt, int hidden )
init_ttyfp();
last_prompt_len = 0;
buf = xmalloc(n=50);
n = 50;
buf = hidden ? xmalloc_secure(n) : xmalloc(n);
i = 0;
#ifdef _WIN32 /* windoze version */