Method Process

Libraries/unrar/secpassword.cpp:102–108

We got a complain from user that it is possible to create WinRAR dump with "Create dump file" command in Windows Task Manager and then easily locate Unicode password string in the dump. It is unsecure if several people share the same computer and somebody left WinRAR copy with entered password. So we decided to obfuscate the password to make it more difficult to find it in dump.

// password. So we decided to obfuscate the password to make it more difficult
// to find it in dump.
void SecPassword::Process(const wchar *Src,size_t SrcSize,wchar *Dst,size_t DstSize,bool Encode)
{
  // Source string can be shorter than destination as in case when we process
  // -p<pwd> parameter, so we need to take into account both sizes.
  memcpy(Dst,Src,Min(SrcSize,DstSize)*sizeof(*Dst));
  SecHideData(Dst,DstSize*sizeof(*Dst),Encode,CrossProcess);
}


void SecPassword::Get(wchar *Psw,size_t MaxSize)