From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Eli Zaretskii Newsgroups: gmane.emacs.bugs Subject: bug#30186: 27.0.50; Password is not hidden in read-passwd Date: Sun, 21 Jan 2018 17:59:19 +0200 Message-ID: <83zi57qk2w.fsf@gnu.org> References: <871sikmd6o.fsf@mail.linkov.net> Reply-To: Eli Zaretskii NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: blaine.gmane.org 1516550311 29091 195.159.176.226 (21 Jan 2018 15:58:31 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sun, 21 Jan 2018 15:58:31 +0000 (UTC) Cc: 30186@debbugs.gnu.org To: Juri Linkov Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sun Jan 21 16:58:26 2018 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1edI0X-0006GZ-MV for geb-bug-gnu-emacs@m.gmane.org; Sun, 21 Jan 2018 16:58:09 +0100 Original-Received: from localhost ([::1]:34915 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1edI2Y-0005KT-3s for geb-bug-gnu-emacs@m.gmane.org; Sun, 21 Jan 2018 11:00:14 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:48988) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1edI2R-0005Jy-II for bug-gnu-emacs@gnu.org; Sun, 21 Jan 2018 11:00:08 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1edI2O-0002LK-GT for bug-gnu-emacs@gnu.org; Sun, 21 Jan 2018 11:00:07 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:57538) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1edI2O-0002L7-C6 for bug-gnu-emacs@gnu.org; Sun, 21 Jan 2018 11:00:04 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1edI2M-0008Hw-H7 for bug-gnu-emacs@gnu.org; Sun, 21 Jan 2018 11:00:04 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Eli Zaretskii Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sun, 21 Jan 2018 16:00:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 30186 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 30186-submit@debbugs.gnu.org id=B30186.151655038531811 (code B ref 30186); Sun, 21 Jan 2018 16:00:02 +0000 Original-Received: (at 30186) by debbugs.gnu.org; 21 Jan 2018 15:59:45 +0000 Original-Received: from localhost ([127.0.0.1]:37202 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1edI25-0008H1-B9 for submit@debbugs.gnu.org; Sun, 21 Jan 2018 10:59:45 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:57858) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1edI23-0008Go-2f for 30186@debbugs.gnu.org; Sun, 21 Jan 2018 10:59:43 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1edI1u-00020F-Mi for 30186@debbugs.gnu.org; Sun, 21 Jan 2018 10:59:37 -0500 Original-Received: from fencepost.gnu.org ([2001:4830:134:3::e]:46759) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1edI1u-000209-Iv; Sun, 21 Jan 2018 10:59:34 -0500 Original-Received: from [176.228.60.248] (port=2132 helo=home-c4e4a596f7) by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_256_CBC_SHA1:256) (Exim 4.82) (envelope-from ) id 1edI1t-0001dM-UH; Sun, 21 Jan 2018 10:59:34 -0500 In-reply-to: <871sikmd6o.fsf@mail.linkov.net> (message from Juri Linkov on Sat, 20 Jan 2018 23:29:35 +0200) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:142344 Archived-At: > From: Juri Linkov > Date: Sat, 20 Jan 2018 23:29:35 +0200 > > This is a regression and a security flaw. > > Reading a password with ‘read-passwd’ doesn't hide inserted characters > anymore as it used to do in older versions. > > When the user has such customization: > > (custom-set-variables > '(yank-excluded-properties t)) > > evaluating > > (read-passwd "Prompt: ") > > and yanking a password to the minibuffer with 'C-y' doesn't hide it > as it did in Emacs 25. > > This can be traced down to ‘remove-yank-excluded-properties’ > where ‘set-text-properties’ used to leave ‘display’ properties > (with ‘.’ over inserted characters) in the minibuffer. Can you spot the commit which causes this, or bisect to find it? Thanks.