ask-password-api: refuse control characters in passwords

Just some extra safety

diff --git a/src/shared/ask-password-api.c b/src/shared/ask-password-api.c
index 91d8945fd13fe22d135095424ea3633e87d0f952..d1a4f24661eb96401eccee6722a37d0ea388a086 100644 (file)
--- a/src/shared/ask-password-api.c
+++ b/src/shared/ask-password-api.c
@@ -745,9 +745,8 @@ int ask_password_tty(
                         if (ttyfd >= 0)
                                 (void) loop_write(ttyfd, NO_ECHO, SIZE_MAX);
 
-                } else if (p >= sizeof(passphrase)-1) {
-
-                        /* Reached the size limit */
+                } else if (char_is_cc(c) || p >= sizeof(passphrase)-1) {
+                        /* Don't accept control chars or overly long passphrases */
                         if (ttyfd >= 0)
                                 (void) loop_write(ttyfd, "\a", 1);