nelenkov/cryptfs-password-manager

Spaces at the beginning or end of a password are quietly ignored.

zydpib opened this issue · 2 comments

If spaces are included at the beginning or end of the password entered by the user they will not be included in the newly set password. For example a password of " password " gets set as "password". The confirmation displayed after the password is set does not make it clear that the spaces were dropped. Spaces in the middle of the password are included as intended.

The app passes the password to the vdc command as is, spaces are most probably trimmed by vdc. You can try vdc cryptfs changepw in console to confirm.

I tried this and got a "200 0 0" back if I remember correctly. Afterwards I was unable to decrypt my phone with or without the spaces. This was with cyanogenmod 12.1 I believe. After wrestling with backups and experimenting with CM13 I ended up starting from scratch with 12.1. At this point I'd like to avoid testing with my daily driver. I can retest with another device when I find some time which is limited these days. Sorry for the delay and lack of useful information. I'll report back when I get a chance.