Security context

Highlights

Information Disclosure: 3 prior fixes. Scrutinize any change in this area.

tomb: most-fixed (6 issues). Treat as high-risk during review.

3 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

Auth Bypass: GnuPG exit codes alone were insufficient to verify successful password validation. Attackers could bypass key validation if the execution context or input array expansion logic permitted a loose status check. Utilizing status-fd descriptors and parsing DECRYPTION_OKAY is required to prevent unauthorized access.

Information Disclosure: Writing unencrypted keys or files to disk or using raw temporary files on non-tmpfs mounts risks leaking cryptographic secrets to unauthorized local users. Secure temporary file patterns and process substitution must be strictly enforced.

Buffer Overflow: A fixed-size stack buffer was used to process user passwords, creating a classic buffer overflow vulnerability when parsing long inputs. Safe dynamic reallocation must be enforced across all key derivation modules.