Skip to content

Saving an unlocked encrypted note can silently change its password or keyfile. #1

Description

@Scrince

When an encrypted file is already open, Save prompts for the password/keyfile again, but it never checks those credentials against the file before overwriting it. The save path just uses whatever the user typed to encrypt the current text again. That means a typo, wrong keyfile, or different strong password can permanently re-key the note without warning. This is in platform/win32/notepad.cpp (line 1013) and platform/linux/main.cpp (line 394).

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions