mbox series

[bitbake-devel,0/2] Fix hash server passwords leaking in logs

Message ID 20241126221829.2825101-1-JPEWhacker@gmail.com
Headers show
Series Fix hash server passwords leaking in logs | expand

Message

Joshua Watt Nov. 26, 2024, 10:16 p.m. UTC 
bitbake prints out function arguments when an exception occurs to aid in
debugging. However, several places in the hash equivalence code that
pass a password as an argument which means that an exception in one of
these code paths would cause the password to be printed out in plain
text.

Fix this by implementing a mechanism that allows functions to opt out of
having their arguments printed in backtraces and set the flag for the
affected hash equivalence code.

Joshua Watt (2):
  exceptions: Add option to hide frame arguments in exceptions
  hashserv: Do not print passwords in exceptions

 bitbake/lib/bb/exceptions.py       | 24 +++++++++++-------------
 bitbake/lib/hashserv/__init__.py   |  6 ++++++
 bitbake/lib/hashserv/client.py     |  6 ++++++
 bitbake/lib/hashserv/server.py     |  2 ++
 bitbake/lib/hashserv/sqlalchemy.py |  2 ++
 5 files changed, 27 insertions(+), 13 deletions(-)