[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: --non-interactive and keyrings

From: Branko ─îibej <brane_at_apache.org>
Date: Thu, 02 Feb 2012 20:56:31 +0100

On 02.02.2012 17:58, Philip Martin wrote:
> However I am worried about the TOCTOU race. There is a small window
> between isOpen and the subsequent readPassword during which the wallet
> may get closed. This might cause --non-interactive to attempt to prompt
> the user for a password.

So ... neither KWallet nor Gnome Keyring have the option to return an
error when trying to read a locked keyring? Brilliant API design. :)

-- Brane
Received on 2012-02-02 20:57:11 CET

This is an archived mail posted to the Subversion Dev mailing list.