# HG changeset patch
# User Richard M. Stallman <rms@gnu.org>
# Date 844815654 0
# Node ID 258a28c21b7445a9674ce0ad80d0df6de171144f
# Parent  87f15c601f5afa4b2bd2a6dd56d8dc7e41bddf92
(comint-read-noecho): Clear out the intermediate strings.

diff -r 87f15c601f5a -r 258a28c21b74 lisp/comint.el
--- a/lisp/comint.el	Tue Oct 08 21:35:03 1996 +0000
+++ b/lisp/comint.el	Tue Oct 08 23:00:54 1996 +0000
@@ -1396,9 +1396,11 @@
 filter and C-g is pressed, this function returns nil rather than a string).
 
 Note that the keystrokes comprising the text can still be recovered
-\(temporarily) with \\[view-lossage].  This may be a security bug for some
-applications."
+\(temporarily) with \\[view-lossage].  Some people find this worrysome.
+Once the caller uses the password, it can erase the password
+by doing (fillarray STRING 0)."
   (let ((ans "")
+	(newans nil)
 	(c 0)
 	(echo-keystrokes 0)
 	(cursor-in-echo-area t)
@@ -1423,10 +1425,14 @@
 	    ((or (= c ?\r) (= c ?\n) (= c ?\e))
 	     (setq done t))
 	    ((= c ?\C-u)
+	     (fillarray ans 0)
 	     (setq ans ""))
 	    ((and (/= c ?\b) (/= c ?\177))
-	     (setq ans (concat ans (char-to-string c))))
+	     (setq newans (concat ans (char-to-string c)))
+	     (fillarray ans 0)
+	     (setq ans newans))
 	    ((> (length ans) 0)
+	     (aset ans (1- (length ans)) 0)
 	     (setq ans (substring ans 0 -1)))))
     (if quit-flag
         ;; Emulate a true quit, except that we have to return a value.