java-topology/defects/musescore-0002/patch/musescore-0002.patch
russell@unturf.com bbf4510d9d musescore+mixxx: 5-MOAD scan; 2 musescore defects, mixxx CLEAN
musescore-0001: CWE-407 pastedHarmony dedup uses std::vector+std::find
  O(A*H) in Read400/Read410/Read460::pasteStaff; fix: unordered_set O(A).
  100.5x op-count speedup at H=200 harmonies pasted. 1/1 PASS.

musescore-0002: CWE-312 OAuth access+refresh tokens logged verbatim via
  LOGD() in AbstractCloudService::onUserAuthorized(); fix: redact values.
  1/1 PASS.

mixxx: all 5 MOADs CLEAN. Only std::find on a 6-item capped list; all
  cache lookups use QHash/QSet O(1); GlobalTrackCache properly mutex-locked;
  no thread_local misuse; no credential values in log calls.
2026-03-31 21:18:03 -04:00

10 lines
468 B
Diff

--- a/src/framework/cloud/internal/abstractcloudservice.cpp
+++ b/src/framework/cloud/internal/abstractcloudservice.cpp
@@ -215,7 +215,7 @@ void AbstractCloudService::onUserAuthorized()
m_accessToken = m_oauth2->token();
m_refreshToken = m_oauth2->refreshToken();
- LOGD() << "========== access " << m_accessToken << " ========= refresh " << m_refreshToken;
+ LOGD() << "========== access [REDACTED] ========= refresh [REDACTED]";
saveTokens();