You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
KeePassXC offers a password strength column, which, when enabled, rates the strength of a password with a green, yellow or red square.
This indicator causes KeePassXC to freeze/hang when calculating the strength of extremely long passwords (5000+ characters).
Steps to Reproduce
Create a new database
Make sure the password strength indicator column is enabled
Create a new entry and fill in more than 5000 arbitrary characters
Click OK. KeePassXC should hang because the View that would be shown next would be the list of entries, thus it is calculating the password strength.
Wait and lock the database (or kill KeePassXC, depending on the length it may hang for several minutes)
Unlock the database. KeePassXC should hang again for the same reason.
Context
Of course no sane person would use passwords that long, but I'm using the SecretService integration and some applications just store data that long (or even longer) in the password field.
Thus, whenever an entry of the SecretService group with a long password value would be displayed as part of the search results, KeePassXC hangs.
As a workaround I disabled searching the SecretService group.
Other workarounds are to disable the password strength indicator or to move the problematic entry to the recycling bin (as this group also isn't searched).
Overview
KeePassXC offers a password strength column, which, when enabled, rates the strength of a password with a green, yellow or red square.
This indicator causes KeePassXC to freeze/hang when calculating the strength of extremely long passwords (5000+ characters).
Steps to Reproduce
Context
Of course no sane person would use passwords that long, but I'm using the SecretService integration and some applications just store data that long (or even longer) in the password field.
Thus, whenever an entry of the SecretService group with a long password value would be displayed as part of the search results, KeePassXC hangs.
As a workaround I disabled searching the SecretService group.
Other workarounds are to disable the password strength indicator or to move the problematic entry to the recycling bin (as this group also isn't searched).
System Information
KeePassXC - Version 2.7.1
Revision: 5916a8f
Qt 5.15.5
Debugging mode is disabled.
Operating system: Arch Linux
CPU architecture: x86_64
Kernel: linux 5.18.14-arch1-1
Enabled extensions:
Cryptographic libraries:
The text was updated successfully, but these errors were encountered: