#4 Password database lost w/ wrong passphrase

[Steve Bourg]

I upgraded my Debian install from 8.9 to 9.1. With pwman-0.4.5, my password database can be opened successfully when inputting the correct password. When however an incorrect password is typed (the first time), pwman starts a new password database instance and overwrites the original .pwman.db file with the new contents upon quitting pwman. pwman is essentially overwriting a valid pwman database file with a new/empty version whenever a passphrase is mistyped.

darius@hyper-new:~/pwman-0.4.5$ pwman --version
pwman v 0.4.5

Copyright (C) 2002-2006 Ivan Kelly
Copyright (C) 2006-2014 Nick Burch

Project details at https://sourceforge.net/projects/pwman/
...

darius@hyper-new:~/pwman-0.4.5$ gpg --version
gpg (GnuPG) 2.1.18
libgcrypt 1.7.6-beta
Copyright (C) 2017 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later https://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: /home/darius/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
CAMELLIA128, CAMELLIA192, CAMELLIA256
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

Captured in strace:
[pid 10408] execve("/usr/bin/gpg", ["gpg", "--passphrase-fd", "0", "--no-verbose", "--batch", "--output", "-", "--pinentry-mode", "loopback", "/home/darius/.pwman.db"],
...
[pid 10741] write(2<pipe:<span>[90204]>, "gpg: encrypted with 3072-bit ELG"..., 77) = 77 [pid 10741] write(2<pipe:<span>[90204]>, "\n", 1) = 1 [pid 10741] write(2<pipe:<span>[90204]>, " \"Steve Bourg <aaaaaa@xxxxx"..., 47) = 47
[pid 10741] write(2<pipe:<span>[90204]>, "\"\n", 2) = 2 [pid 10741] write(2<pipe:<span>[90204]>, "gpg: public key decryption faile"..., 49) = 49 [pid 10741] write(2<pipe:<span>[90204]>, "\n", 1) = 1
[pid 10741] write(2<pipe:<span>[90204]>, "gpg: decryption failed: No secre"..., 37) = 37 [pid 10741] write(2<pipe:<span>[90204]>, "\n", 1) = 1 </pipe:<span></pipe:<span></pipe:<span></pipe:<span></pipe:<span></pipe:<span></pipe:<span></pipe:<span>