[Pkg-owncloud-commits] [python-owncloud] 28/33: Fixes: Authentication callback prints real password in debug mode

Sandro Knauß hefee-guest at moszumanska.debian.org
Fri Nov 22 01:49:48 UTC 2013


This is an automated email from the git hooks/post-receive script.

hefee-guest pushed a commit to branch upstream
in repository python-owncloud.

commit e360f932e75692ae18a90a1261ef6a4d2c4c87c2
Author: hefee <hefee at netzguerilla.net>
Date:   Tue Nov 19 13:53:22 2013 +0100

    Fixes: Authentication callback prints real password in debug mode
    
    Close: #55
---
 csync/csync.py |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/csync/csync.py b/csync/csync.py
index bfe0f67..392f6a7 100755
--- a/csync/csync.py
+++ b/csync/csync.py
@@ -71,9 +71,9 @@ def authCallback(prompt, buffer, bufferLength, echo, verify, userData):
 		ctypes.memset(buffer+i, ord(ret[i]), 1)
 	if DEBUG:
 		buffString = ctypes.string_at(buffer, bufferLength)
-		if PASSWORD:
-			if PASSWORD in buffString:
-				buffString = buffString.replace(PASSWORD, PASSWORD_SAFE)
+		if 'password' in prompt:
+			if ret and ret in buffString:
+				buffString = buffString.replace(ret, PASSWORD_SAFE)
 		print 'returning:', buffString
 	return 0
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-owncloud/python-owncloud.git



More information about the Pkg-owncloud-commits mailing list