From mboxrd@z Thu Jan 1 00:00:00 1970 Path: main.gmane.org!not-for-mail From: Alexander Petry Newsgroups: gmane.emacs.bugs Subject: Insecurity in view-lossage Date: Fri, 03 May 2002 00:38:28 +0200 Sender: bug-gnu-emacs-admin@gnu.org Message-ID: Reply-To: a_petry@informatik.uni-kl.de NNTP-Posting-Host: localhost.gmane.org X-Trace: main.gmane.org 1020379335 8354 127.0.0.1 (2 May 2002 22:42:15 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Thu, 2 May 2002 22:42:15 +0000 (UTC) Return-path: Original-Received: from fencepost.gnu.org ([199.232.76.164]) by main.gmane.org with esmtp (Exim 3.33 #1 (Debian)) id 173PHC-0002Ad-00 for ; Fri, 03 May 2002 00:42:14 +0200 Original-Received: from localhost ([127.0.0.1] helo=fencepost.gnu.org) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 173PH9-0007ml-00; Thu, 02 May 2002 18:42:11 -0400 Original-Received: from mail.uni-kl.de ([131.246.137.52] helo=uni-kl.de) by fencepost.gnu.org with esmtp (Exim 3.34 #1 (Debian)) id 173PFB-0007Zs-00 for ; Thu, 02 May 2002 18:40:09 -0400 Original-Received: from mailgate1.uni-kl.de (mailgate1.uni-kl.de [131.246.120.5]) by uni-kl.de (8.11.6+Sun/8.11.5) with ESMTP id g42Me7614179 for ; Fri, 3 May 2002 00:40:07 +0200 (MET DST) Original-Received: from mailinf.rhrk.uni-kl.de (mailinf.rhrk.uni-kl.de [131.246.137.54]) by mailgate1.uni-kl.de (8.12.1/8.12.1) with ESMTP id g42Me7NA031084 for ; Fri, 3 May 2002 00:40:07 +0200 Original-Received: from domino.informatik.uni-kl.de (domino.informatik.uni-kl.de [131.246.161.19]) by mailinf.rhrk.uni-kl.de (8.10.2+Sun/8.11.5) with ESMTP id g42Me6O20903 for ; Fri, 3 May 2002 00:40:06 +0200 (MET DST) Original-Received: from linuxbox.wohnheim.uni-kl.de (rotes278.wohnheim.uni-kl.de [131.246.178.88]) by domino.informatik.uni-kl.de (8.11.6/8.11.6) with ESMTP id g42Me6909512 for ; Fri, 3 May 2002 00:40:06 +0200 (MEST) Original-Received: from alex by linuxbox.wohnheim.uni-kl.de with local (Exim 3.35 #1 (Debian)) id 173PDY-0000vS-00 for ; Fri, 03 May 2002 00:38:28 +0200 Original-To: bug-gnu-emacs@gnu.org Errors-To: bug-gnu-emacs-admin@gnu.org X-BeenThere: bug-gnu-emacs@gnu.org X-Mailman-Version: 2.0.9 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: Bug reports for GNU Emacs, the Swiss army knife of text editors List-Unsubscribe: , List-Archive: Xref: main.gmane.org gmane.emacs.bugs:1115 X-Report-Spam: http://spam.gmane.org/gmane.emacs.bugs:1115 This bug report will be sent to the Free Software Foundation, not to your local site managers!! Please write in English, because the Emacs maintainers do not have translators to read other languages for them. In GNU Emacs 20.7.2 (i386-debian-linux-gnu, X toolkit) of Tue Apr 9 2002 on lilac modified by Debian configured using `configure --prefix=/usr --with-gcc --libexecdir=/usr/lib --mandir=/usr/share/man --infodir=/usr/share/info --sharedstatedir=/var/lib --localstatedir=/var/lib --with-pop=yes --with-x=yes --with-x-toolkit=yes --with-xim=yes --enable-ipv6 i386-debian-linux-gnu' Please describe exactly what actions triggered the bug and the precise symptoms of the bug: Hi. I think, I have found a bug considering the view-lossage function. If you have typed in a password in some buffer (i.e. shell, with the option "comint-output-filter-functions" set) one can read that password in the view-lossage (C-hl) function. Yours sincerely, alex Recent input: up up up up up up C-b C-v menu-bar edit undo up up up up up up up up up up up up up up up up up up up up up up C-x C-c n y e s backspace backspace backspace n o return f10 y e s return f10 f10 C-x 1 f10 f10 f10 f10 f10 f10 f10 f10 f10 f10 C-x b C-g C-x C-b C-x 1 M-b M-x M-b C-g M-x b u tab g tab backspace backspace backspace backspace r e tab p tab tab o tab r tab return C-g M-x up return Recent messages: Quit [2 times] Making completion list... Beginning of buffer Making completion list... [3 times] Loading emacsbug... Loading emacsbug...done Quit