GNU bug report logs - #43302
password shows up in shell buffer (27.1)

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: emacs; Reported by: Nicholas Drozd <nicholasdrozd@HIDDEN>; dated Thu, 10 Sep 2020 00:41:01 UTC; Maintainer for emacs is bug-gnu-emacs@HIDDEN.

Message received at 43302 <at> debbugs.gnu.org:


Received: (at 43302) by debbugs.gnu.org; 10 Sep 2020 12:27:07 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Sep 10 08:27:07 2020
Received: from localhost ([127.0.0.1]:37522 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1kGLfO-00012L-Sj
	for submit <at> debbugs.gnu.org; Thu, 10 Sep 2020 08:27:07 -0400
Received: from mail-wr1-f50.google.com ([209.85.221.50]:46675)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <rpluim@HIDDEN>) id 1kGLfM-00011q-Iq
 for 43302 <at> debbugs.gnu.org; Thu, 10 Sep 2020 08:27:05 -0400
Received: by mail-wr1-f50.google.com with SMTP id o5so6438014wrn.13
 for <43302 <at> debbugs.gnu.org>; Thu, 10 Sep 2020 05:27:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=from:to:cc:subject:references:date:in-reply-to:message-id
 :mime-version; bh=Tw+O8Mxg1fjwxPwm9peXtNWSxP3BjgFuyhEzbRL4oJ4=;
 b=hzADLRb1DEYWS/0QT/SC5tPq1GthIiORpNCfddEaclBuM3UBVgsnmWQUswD3A4IZce
 VXD1EOL8q9zVkIs778qc5Fc0w1IPxcBi15fNfQECUm4wZVCX+87NLpcd48/T/UZwcsDC
 q0mtmzqm+zaJP1Nn15f+pzwF3VDRlje4zO2F6YL/gj1pt84qd5lWGKWEYPnhXhYMnAO5
 p2yACeI0mHpNl+RErZik02NQQlPSK1AsI35zLJjeMlyzV+OysTaV8z3oDK7DTHzHrE+/
 d8jUSNE+XL6Zph7QL2RtESQtvBz3cH8+5PM8T+OxjrdF6t9AW/C9Sz9AnseIKCAdvNMt
 jbPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to
 :message-id:mime-version;
 bh=Tw+O8Mxg1fjwxPwm9peXtNWSxP3BjgFuyhEzbRL4oJ4=;
 b=YJAiR9bQkIqu4FqpzSoAqTm7j0402E82xO/fV+k148YFum1imyp2ml6HRQCipVP+6n
 +42DdG3T1QkRG6VrxiXvdXKcnHwhOyIqwonYwUEUKl7OySTVTNoYNgvSe7KF5BRRgzAD
 PwAF+4GPInBR+mhXpTK4362oVlnGwRozIXVYw582vOOno6vStlxj2/sojrTJKmTKJPHY
 +1T8UdhLpkrITiXwyfmN5ByLNV0ifduITDp0nx+U6BCTqWLHN7xIHgYQvDg53Dvld1n7
 ezH8Y+L7DZdqvPVGRL7Nd8S/ehIIef8YLnG7JFvyb1i9HpFu3gu8w2w/FnWjTqmuOfQo
 avsw==
X-Gm-Message-State: AOAM5326uTyeNlbp93lJbEwpihSqyq/J+HiggwmbX/12TqJ2szSnqeoS
 Xdvli0U4Co3Q67mOF3y+rHqVu5InPnA=
X-Google-Smtp-Source: ABdhPJy+UwUme8ZyhGNknluUKZXrrciJx9RLCUUH/10dSDymuJWe1dVMAL5eK/vLTUHxReBpd7KExQ==
X-Received: by 2002:adf:d4c1:: with SMTP id w1mr8865136wrk.108.1599740818365; 
 Thu, 10 Sep 2020 05:26:58 -0700 (PDT)
Received: from rpluim-mac ([2a01:e34:ecfc:a860:8c16:d3f4:7c3b:1764])
 by smtp.gmail.com with ESMTPSA id 91sm9766684wrq.9.2020.09.10.05.26.57
 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
 Thu, 10 Sep 2020 05:26:57 -0700 (PDT)
From: Robert Pluim <rpluim@HIDDEN>
To: Nicholas Drozd <nicholasdrozd@HIDDEN>
Subject: Re: bug#43302: password shows up in shell buffer (27.1)
References: <CABAiW0pgpCWOVtGTVXtZX6NjnUQmfq0UPqEPxxihDzrWKmyrhg@HIDDEN>
Date: Thu, 10 Sep 2020 14:26:56 +0200
In-Reply-To: <CABAiW0pgpCWOVtGTVXtZX6NjnUQmfq0UPqEPxxihDzrWKmyrhg@HIDDEN>
 (Nicholas Drozd's message of "Wed, 9 Sep 2020 19:40:04 -0500")
Message-ID: <m24ko5x1f3.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 43302
Cc: 43302 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

>>>>> On Wed, 9 Sep 2020 19:40:04 -0500, Nicholas Drozd <nicholasdrozd@HIDDEN> said:

    Nicholas> This may be related to
    Nicholas> https://lists.gnu.org/archive/html/bug-gnu-emacs/2020-09/msg00028.html

The patch for that is in master, not in emacs-27, so something else is
going on.

Robert




Information forwarded to bug-gnu-emacs@HIDDEN:
bug#43302; Package emacs. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 10 Sep 2020 00:40:22 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Sep 09 20:40:22 2020
Received: from localhost ([127.0.0.1]:35471 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1kGAdS-0001MD-Gk
	for submit <at> debbugs.gnu.org; Wed, 09 Sep 2020 20:40:22 -0400
Received: from lists.gnu.org ([209.51.188.17]:53692)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <nicholasdrozd@HIDDEN>) id 1kGAdQ-0001M4-Lr
 for submit <at> debbugs.gnu.org; Wed, 09 Sep 2020 20:40:21 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:44146)
 by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <nicholasdrozd@HIDDEN>)
 id 1kGAdQ-0004OG-Eg
 for bug-gnu-emacs@HIDDEN; Wed, 09 Sep 2020 20:40:20 -0400
Received: from mail-ej1-x632.google.com ([2a00:1450:4864:20::632]:45065)
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128)
 (Exim 4.90_1) (envelope-from <nicholasdrozd@HIDDEN>)
 id 1kGAdO-0006UH-Qj
 for bug-gnu-emacs@HIDDEN; Wed, 09 Sep 2020 20:40:20 -0400
Received: by mail-ej1-x632.google.com with SMTP id i26so6112308ejb.12
 for <bug-gnu-emacs@HIDDEN>; Wed, 09 Sep 2020 17:40:17 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:from:date:message-id:subject:to;
 bh=RqYvlmbW0jNM395V2FJ4a+FTo9YjOu0tLUnYqjkLpl8=;
 b=QUzpWn6p84Zh2F/VCRxYk37EuDoRIKQOHN1GvgLQaM6Dn/DM+BrcEYnZdcZ1EKnasB
 7dooG6nGmmyGLyTwXUrIPqHCfvvgQpstHTaBqixe800/4V9PRD+eMqL4g2Gv/CvvDoqe
 MnPN6PnEQeA+JyVpGw3A0LCjJfjMEw+eMLtFNUG03sMF3LJVspM2tyB7ttJDVGQn4EKm
 JBCSLL63+PN+/Vrd4OzBKpig2QcAC3W/lxYm+/S69HweqkAIeEsm8izXguS2Fl6fk0/x
 TZ02Pt8t/SOX1QETom+KVHiIEChyOw8wXwT8VoJFR2Jgn4ARMUQEGzrVCWEz0tsoyQ4V
 diMQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=RqYvlmbW0jNM395V2FJ4a+FTo9YjOu0tLUnYqjkLpl8=;
 b=o1pxx8f6NN/z0dgiqEm20xVDfkLZxOKlOlzhfH8OuFZRNrqWI5TSVpbcUrUps2e4rc
 p0lwBOKimp6If7LfDjltdHwqd/iBYJV8eR23Hx1u50826WSlv/a4pFsrv0IcRIpaZd/s
 YJ5LZRXHHrV/IK12tx2Lz2l/E4eIfPMFIJ+L+DqJkB4qBTKBhhXGhNbFQ7y25fUvmNSA
 0ZIfUdlZRoerutVjJ9Pugc/H+riXWLvwJI9IFoUF6bGhQF5ff2/AXOdCcifG/iWHsrfp
 AzDIW+NZD9HLUpsjCdUxyUw2YAXPkqtNYCM1sb7081XuMokajgWdMliKwAfxFuTLzCp9
 m6Ig==
X-Gm-Message-State: AOAM532YvOwLpsroYQ/SVq0ZTeZw6fm8e5tcP715KyOeyFAJBZvXNNGG
 MCqp1FPp5cnyw2FHLhZpUhqjJeO1jJIbP5BiF35+u3Bam+vLiQ==
X-Google-Smtp-Source: ABdhPJzNuwHmID+uU2i1pwFGPYjIIMh9a1XSp6J38rDVxpsXJ1LLWkPAF3TF2qYmN6n97xbrX+K7jxiibtWj6rapX78=
X-Received: by 2002:a17:906:cf8b:: with SMTP id
 um11mr6625483ejb.540.1599698416503; 
 Wed, 09 Sep 2020 17:40:16 -0700 (PDT)
MIME-Version: 1.0
From: Nicholas Drozd <nicholasdrozd@HIDDEN>
Date: Wed, 9 Sep 2020 19:40:04 -0500
Message-ID: <CABAiW0pgpCWOVtGTVXtZX6NjnUQmfq0UPqEPxxihDzrWKmyrhg@HIDDEN>
Subject: password shows up in shell buffer (27.1)
To: bug-gnu-emacs@HIDDEN
Content-Type: text/plain; charset="UTF-8"
Received-SPF: pass client-ip=2a00:1450:4864:20::632;
 envelope-from=nicholasdrozd@HIDDEN; helo=mail-ej1-x632.google.com
X-detected-operating-system: by eggs.gnu.org: No matching host in p0f cache.
 That's all we know.
X-Spam_score_int: -20
X-Spam_score: -2.1
X-Spam_bar: --
X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001 autolearn=ham autolearn_force=no
X-Spam_action: no action
X-Spam-Score: 0.7 (/)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.3 (--)

The password input starring in shell mode seems to have changed in 27
from 26 to become more lax. Here is a small shell script:

#+begin_src shell
echo "Password:"
read -sr password
#+end_src

In 26, it looks like this when I run it:

#+begin_quote
$ bash password.sh
Password:
$
#+end_quote

The password is input starred into the minibuffer, not in the shell
buffer itself.

In 27, it looks like this:

#+begin_src
$ bash password.sh
Password:
asdf
$
#+end_src

The password (=asdf=) gets input directly into the shell buffer, unstarred.

I have tried on both Linux and Mac.

This may be related to
https://lists.gnu.org/archive/html/bug-gnu-emacs/2020-09/msg00028.html




Acknowledgement sent to Nicholas Drozd <nicholasdrozd@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs@HIDDEN. Full text available.
Report forwarded to bug-gnu-emacs@HIDDEN:
bug#43302; Package emacs. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Thu, 10 Sep 2020 12:30:01 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.