diff options
author | Richard M. Stallman <rms@gnu.org> | 1996-10-08 23:00:54 +0000 |
---|---|---|
committer | Richard M. Stallman <rms@gnu.org> | 1996-10-08 23:00:54 +0000 |
commit | dc81e1664f0d89beb046242a896912b3fc9bee37 (patch) | |
tree | 26b1e8ae4e315d63659f7345c9d7842e8c7cb59b /lisp/comint.el | |
parent | 0565d3079ac6c86a0680d533f4dbe70df86d5597 (diff) | |
download | emacs-dc81e1664f0d89beb046242a896912b3fc9bee37.tar.gz |
(comint-read-noecho): Clear out the intermediate strings.
Diffstat (limited to 'lisp/comint.el')
-rw-r--r-- | lisp/comint.el | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/lisp/comint.el b/lisp/comint.el index ae427e48dac..91cf20d550b 100644 --- a/lisp/comint.el +++ b/lisp/comint.el @@ -1396,9 +1396,11 @@ RET, LFD, or ESC. DEL or C-h rubs out. C-u kills line. C-g aborts (if filter and C-g is pressed, this function returns nil rather than a string). Note that the keystrokes comprising the text can still be recovered -\(temporarily) with \\[view-lossage]. This may be a security bug for some -applications." +\(temporarily) with \\[view-lossage]. Some people find this worrysome. +Once the caller uses the password, it can erase the password +by doing (fillarray STRING 0)." (let ((ans "") + (newans nil) (c 0) (echo-keystrokes 0) (cursor-in-echo-area t) @@ -1423,10 +1425,14 @@ applications." ((or (= c ?\r) (= c ?\n) (= c ?\e)) (setq done t)) ((= c ?\C-u) + (fillarray ans 0) (setq ans "")) ((and (/= c ?\b) (/= c ?\177)) - (setq ans (concat ans (char-to-string c)))) + (setq newans (concat ans (char-to-string c))) + (fillarray ans 0) + (setq ans newans)) ((> (length ans) 0) + (aset ans (1- (length ans)) 0) (setq ans (substring ans 0 -1))))) (if quit-flag ;; Emulate a true quit, except that we have to return a value. |