russell@unturf.com
20b8a57f89
linapple: 1 CWE-312 defect (MOAD-0004), MOAD 0001/0002/0003/0005 CLEAN
14 lines
526 B
Diff
14 lines
526 B
Diff
# UNDF: UNDF-2026-XXXXXXXXX
|
|
--- a/src/Applewin.cpp
|
|
+++ b/src/Applewin.cpp
|
|
@@ -868,7 +868,12 @@ static void LoadConfiguration(bool registry)
|
|
}
|
|
// Print some debug strings
|
|
- printf("Ready login = %s\n", g_sFTPUserPass);
|
|
+ {
|
|
+ /* CWE-312: g_sFTPUserPass is "user:password" — never log verbatim. */
|
|
+ const char *colon = strchr(g_sFTPUserPass, ':');
|
|
+ int user_len = colon ? (int)(colon - g_sFTPUserPass) : (int)strlen(g_sFTPUserPass);
|
|
+ printf("Ready login = %.*s:***\n", user_len, g_sFTPUserPass);
|
|
+ }
|
|
}
|