[Bug 217298] [geli][boot] geli boot password prompt can be tricked to echo password in clear text

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217298

Kristof Provost <kp at freebsd.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kp at freebsd.org
           Assignee|freebsd-bugs at FreeBSD.org    |allanjude at FreeBSD.org

--- Comment #1 from Kristof Provost <kp at freebsd.org> ---
This appears to be a deliberate feature:

In pwgets() (in sys/boot/geli/pwgets.c):
        case 'r'&037: {
            char *p;

            putchar('\n');
            for (p = buf; p < lp; ++p)
                putchar(*p);
            break;
        }

I've not found a justification for it in the commit message or the review
discussion.
Assigning to the original author for more input.

-- 
You are receiving this mail because:
You are the assignee for the bug.