All issues

Search results

[bug bounty] The plaintext buffers in scryptenc_file and scryptdec_file_copy are never wiped

Status: Open.

#438 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] "scrypt dec" aborts on an assertion when given explicit --logN/-r/-p

Status: Open.

#436 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] Output close/flush errors are ignored, so scrypt can exit 0 with incomplete output

Status: Open.

#434 In Tarsnap/scrypt;

· sapphiremaid opened on Sep 6, 2026

[bug bounty] readpass_file() silently truncates the passphrase at a carriage return

Status: Open.

#431 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] The expanded AES key is leaked when a write to the output file fails

Status: Open.

#429 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] "scrypt enc f f" silently destroys f: the output file is truncated before the input is read

Status: Open.

#427 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] "scrypt info" shifts by an unvalidated logN byte from the file header

Status: Open.

#425 In Tarsnap/scrypt;

· woahwhattheheck opened on Sep 6, 2026

[bug bounty] parsenum_float accepts NaN for any bounds; -t maxtime yields p=0 via UB (generalizes #423)

Status: Open.

#424 In Tarsnap/scrypt;

· tzh476 opened on Aug 31, 2026

NaN accepted for -m causes memtouse assertion abort

Status: Open.

#423 In Tarsnap/scrypt;

· paulcakeface opened on Aug 25, 2026

Feature request: allow decryption on low memory systems

enhancement

help wanted

Status: Open.

#4 In Tarsnap/scrypt;

· coderb opened on Aug 5, 2015