You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For getting the user password EncFSConfig::getUserKey does not seem to check exit status of the external command and use its stdout regardless.
If --extpass is used while creating a new filesystem and the external program fails with some output on its stdout (otherwise you get fatal: zero-length passwords are not allowed ), then user would be creating a filesystem with potentially no way to recover files. I noticed this by passing wrong flags to external process that caused it to print usage text and fail, while filesystem creation succeeded. encfs command should instead check exit status of subprocess after the waitpid call and fail if it is not 0.
The text was updated successfully, but these errors were encountered:
For getting the user password
EncFSConfig::getUserKey
does not seem to check exit status of the external command and use its stdout regardless.If
--extpass
is used while creating a new filesystem and the external program fails with some output on its stdout (otherwise you getfatal: zero-length passwords are not allowed
), then user would be creating a filesystem with potentially no way to recover files. I noticed this by passing wrong flags to external process that caused it to print usage text and fail, while filesystem creation succeeded. encfs command should instead check exit status of subprocess after the waitpid call and fail if it is not 0.The text was updated successfully, but these errors were encountered: