From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Juri Linkov Newsgroups: gmane.emacs.bugs Subject: bug#30186: 27.0.50; Password is not hidden in read-passwd Date: Sat, 20 Jan 2018 23:29:35 +0200 Organization: LINKOV.NET Message-ID: <871sikmd6o.fsf@mail.linkov.net> NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Trace: blaine.gmane.org 1516484304 23377 195.159.176.226 (20 Jan 2018 21:38:24 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Sat, 20 Jan 2018 21:38:24 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.0.50 (x86_64-pc-linux-gnu) To: 30186@debbugs.gnu.org Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Sat Jan 20 22:38:20 2018 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ed0q1-00057j-6U for geb-bug-gnu-emacs@m.gmane.org; Sat, 20 Jan 2018 22:38:09 +0100 Original-Received: from localhost ([::1]:37235 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ed0s1-0004Cq-Bb for geb-bug-gnu-emacs@m.gmane.org; Sat, 20 Jan 2018 16:40:13 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53429) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ed0ru-0004Cb-4O for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:40:06 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ed0rr-0002Z0-0L for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:40:06 -0500 Original-Received: from debbugs.gnu.org ([208.118.235.43]:56711) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1ed0rq-0002Ym-TX for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:40:02 -0500 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1ed0rq-0000jA-Jn for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:40:02 -0500 X-Loop: help-debbugs@gnu.org Resent-From: Juri Linkov Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Sat, 20 Jan 2018 21:40:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 30186 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Original-Received: via spool by submit@debbugs.gnu.org id=B.15164843802753 (code B ref -1); Sat, 20 Jan 2018 21:40:02 +0000 Original-Received: (at submit) by debbugs.gnu.org; 20 Jan 2018 21:39:40 +0000 Original-Received: from localhost ([127.0.0.1]:36373 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ed0rT-0000iG-KK for submit@debbugs.gnu.org; Sat, 20 Jan 2018 16:39:39 -0500 Original-Received: from eggs.gnu.org ([208.118.235.92]:34116) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ed0rS-0000i1-Fd for submit@debbugs.gnu.org; Sat, 20 Jan 2018 16:39:38 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ed0rM-0001qL-84 for submit@debbugs.gnu.org; Sat, 20 Jan 2018 16:39:33 -0500 Original-Received: from lists.gnu.org ([2001:4830:134:3::11]:38997) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ed0rM-0001q7-4c for submit@debbugs.gnu.org; Sat, 20 Jan 2018 16:39:32 -0500 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:53307) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ed0rL-00046Z-6t for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:39:31 -0500 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ed0rK-0001nL-54 for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:39:31 -0500 Original-Received: from sub3.mail.dreamhost.com ([69.163.253.7]:42398 helo=homiemail-a21.g.dreamhost.com) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ed0rJ-0001mm-Sw for bug-gnu-emacs@gnu.org; Sat, 20 Jan 2018 16:39:30 -0500 Original-Received: from homiemail-a21.g.dreamhost.com (localhost [127.0.0.1]) by homiemail-a21.g.dreamhost.com (Postfix) with ESMTP id EF46F1C0066 for ; Sat, 20 Jan 2018 13:39:28 -0800 (PST) Original-Received: from localhost.linkov.net (m91-129-108-180.cust.tele2.ee [91.129.108.180]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: jurta@jurta.org) by homiemail-a21.g.dreamhost.com (Postfix) with ESMTPSA id 59D3A1C0065 for ; Sat, 20 Jan 2018 13:39:28 -0800 (PST) X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x (no timestamps) [generic] [fuzzy] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:142334 Archived-At: This is a regression and a security flaw. Reading a password with =E2=80=98read-passwd=E2=80=99 doesn't hide insert= ed characters anymore as it used to do in older versions. When the user has such customization: (custom-set-variables '(yank-excluded-properties t)) evaluating (read-passwd "Prompt: ") and yanking a password to the minibuffer with 'C-y' doesn't hide it as it did in Emacs 25. This can be traced down to =E2=80=98remove-yank-excluded-properties=E2=80= =99 where =E2=80=98set-text-properties=E2=80=99 used to leave =E2=80=98displa= y=E2=80=99 properties (with =E2=80=98.=E2=80=99 over inserted characters) in the minibuffer.