LibCore: get_password returns SecretString but might leave behind cleartext password in freed memory
Core::getpassword calls ::getline which calls ::getdelim which reallocs as it sees fit.
However, since this "vulnerability" only occurs when the user's password exceeds #define BUFSIZ 1024 bytes, I'm going to assume that doesn't ever happen.
SerenityOS / serenity
The Serenity Operating System 🐞
30.6k
Contributors get 100% of received funds after fees
How does funding with Polar work?
1
Pay now to fund the work behind this issue.
2
Get updates on progress being made.
3
Maintainer is rewarded once the issue is completed.
FAQ
Backer
You're funding impactful open source efforts
Contributor
You want to contribute to this effort
Maintainer
You want to get funding like this too