First Flight #1: PasswordStore

Summary

Misspelling in event name and false comment on getPassword() function

Vulnerability Details

1. Misspelled event SetNetPassword instead of event SetNewPassword)

2. False comment at getPassword() function, where it says that it has @param newPassword The new password to set. variable, which is not true. Also, "this allows only the owner" seems like a word "function" is missed between "this" and "allows".

Impact

Confusing comment and name.

Recommendations

1. Rename event SetNetPassword to SetNewPassword

2. Remove @param newPassword from comment section. Replace "this allows" with "this function allows".