From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Stefan Monnier Newsgroups: gmane.emacs.bugs Subject: bug#17839: 24.4.50; read-passwd echoes password input in non-interactive sessions Date: Thu, 07 Aug 2014 09:01:49 -0400 Message-ID: References: <1990658.6gzIWbjLAl@lunaryorn> NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1407416597 25668 80.91.229.3 (7 Aug 2014 13:03:17 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 7 Aug 2014 13:03:17 +0000 (UTC) Cc: schwab@suse.de, 17839@debbugs.gnu.org, Michael Albinus To: Sebastian Wiesner Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Thu Aug 07 15:03:09 2014 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1XFNLS-0006mb-6U for geb-bug-gnu-emacs@m.gmane.org; Thu, 07 Aug 2014 15:03:02 +0200 Original-Received: from localhost ([::1]:46349 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XFNLR-0005mi-PV for geb-bug-gnu-emacs@m.gmane.org; Thu, 07 Aug 2014 09:03:01 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:36906) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XFNKb-0004tM-WD for bug-gnu-emacs@gnu.org; Thu, 07 Aug 2014 09:02:17 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XFNKU-0006uC-Gy for bug-gnu-emacs@gnu.org; Thu, 07 Aug 2014 09:02:09 -0400 Original-Received: from debbugs.gnu.org ([140.186.70.43]:54794) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XFNKU-0006u8-DV for bug-gnu-emacs@gnu.org; Thu, 07 Aug 2014 09:02:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.80) (envelope-from ) id 1XFNKT-0005Lj-UM for bug-gnu-emacs@gnu.org; Thu, 07 Aug 2014 09:02:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Monnier Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 07 Aug 2014 13:02:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 17839 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 17839-submit@debbugs.gnu.org id=B17839.140741651920554 (code B ref 17839); Thu, 07 Aug 2014 13:02:01 +0000 Original-Received: (at 17839) by debbugs.gnu.org; 7 Aug 2014 13:01:59 +0000 Original-Received: from localhost ([127.0.0.1]:33504 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XFNKQ-0005LR-EP for submit@debbugs.gnu.org; Thu, 07 Aug 2014 09:01:59 -0400 Original-Received: from ironport2-out.teksavvy.com ([206.248.154.181]:47079) by debbugs.gnu.org with esmtp (Exim 4.80) (envelope-from ) id 1XFNKO-0005LE-7d for 17839@debbugs.gnu.org; Thu, 07 Aug 2014 09:01:56 -0400 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ArYGAIDvNVPAqyKr/2dsb2JhbABZgwaDSr0vgw6BFxd0giUBAQEBAgFWIwULCw4iBBIUGA0kiAQI0hkXjnoHGIQgBKsDgXGBWyE X-IPAS-Result: ArYGAIDvNVPAqyKr/2dsb2JhbABZgwaDSr0vgw6BFxd0giUBAQEBAgFWIwULCw4iBBIUGA0kiAQI0hkXjnoHGIQgBKsDgXGBWyE X-IronPort-AV: E=Sophos;i="4.97,753,1389762000"; d="scan'208";a="82366612" Original-Received: from 192-171-34-171.cpe.pppoe.ca (HELO pastel.home) ([192.171.34.171]) by ironport2-out.teksavvy.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 07 Aug 2014 09:01:49 -0400 Original-Received: by pastel.home (Postfix, from userid 20848) id 2D47A60787; Thu, 7 Aug 2014 09:01:49 -0400 (EDT) In-Reply-To: <1990658.6gzIWbjLAl@lunaryorn> (Sebastian Wiesner's message of "Thu, 07 Aug 2014 13:12:59 +0200") User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.4.50 (gnu/linux) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.15 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x X-Received-From: 140.186.70.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.bugs:92254 Archived-At: > I know, but I'd argue that since it's kind of a security issue, albeit > small, it deserves a timely fix. YMMV, though, and I'm ok with > either decision you make. I'm OK with installing a fix for it in emacs-24, but the fix we have in trunk is not "obviously safe" enough to be appropriate for emacs-24. And I think the warning we added to emacs-24 is a sufficient (tho not ideal) stop-gap for emacs-24. IOW feel free to send a safer patch (with corresponding copyright paperwork, of course), Stefan