devs/cproof
1
2
Fork 1
Code Issues 43 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

fix(ai): remove API key from debug log
Some checks failed
CI Code / Check spelling (pull_request) Successful in 22s
Details
CI Code / Check coding style (pull_request) Successful in 37s
Details
CI Code / Linux (debian) (pull_request) Failing after 2m59s
Details
CI Code / Linux (ubuntu) (pull_request) Failing after 3m10s
Details
CI Code / Code Coverage (pull_request) Successful in 2m58s
Details
CI Code / Linux (arch) (pull_request) Failing after 3m59s
Details

Browse Source 
Remove the log_debug line in ai_client.c that leaked the first 10
characters of the API key into logs. This is also contained a memory leak (g_strndup
return value was never freed).
This commit is contained in:
Jabber Developer
2026-04-30 19:05:33 +00:00
parent 25e0459979
commit c9a5239117
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
src/ai/ai_client.c
View File

@@ -717,7 +717,6 @@ _ai_request_thread(gpointer data)
log_debug("[AI-THREAD] API URL: %s", api_url);
log_debug("[AI-THREAD] API Request URL: %s", request_url);
log_debug("[AI-THREAD] Model: %s", session->model);
log_debug("[AI-THREAD] API Key: %s", session->api_key ? (strlen(session->api_key) > 10 ? g_strndup(session->api_key, 10) : session->api_key) : "NULL");
curl_easy_setopt(curl, CURLOPT_URL, request_url);
curl_easy_setopt(curl, CURLOPT_HTTPHEADER, headers);
curl_easy_setopt(curl, CURLOPT_POSTFIELDS, json_payload);