fix: minimize and zeroize owned password buffers

This commit is contained in:
Valdemar Lorenzen
2026-10-20 12:56:38 +02:00
parent 499e070397
commit 128c6ee829
4 changed files with 79 additions and 18 deletions
+2
View File
@@ -103,6 +103,8 @@ Navigation:
Left/Right changes TLS when focused. Enter connects and updates that saved entry
only on success; failures keep the previous settings and connection. Esc discards edits.
Passwords are masked, never saved, and clear on success or cancellation.
Owned input buffers are zeroized on clear/drop; profile saving does not copy passwords.
This does not erase driver copies, prior input allocations, or protect a compromised host.
Ctrl-U clears a field; pasting is supported.
Enter the database user explicitly; the operating-system username is not used.
Configurations persist in $XDG_CONFIG_HOME/dbdash/connections.sqlite3, falling