Don't log secrets in cipherBlock module.
In practice there are lots of ways secrets can be leaked (e.g. info load, protocol) but at least remove this instance.
@@ -386,7 +386,7 @@ cipherBlockNew(CipherMode mode, CipherType cipherType, const Buffer *pass, const
FUNCTION_LOG_BEGIN(logLevelTrace);
FUNCTION_LOG_PARAM(ENUM, mode);
FUNCTION_LOG_PARAM(ENUM, cipherType);
- FUNCTION_LOG_PARAM(BUFFER, pass);
+ FUNCTION_TEST_PARAM(BUFFER, pass); // Use FUNCTION_TEST so passphrase is not logged
FUNCTION_LOG_PARAM(STRING, digestName);
FUNCTION_LOG_END();
@@ -471,7 +471,7 @@ cipherBlockFilterGroupAdd(IoFilterGroup *filterGroup, CipherType type, CipherMod
FUNCTION_LOG_PARAM(IO_FILTER_GROUP, filterGroup);
FUNCTION_LOG_PARAM(ENUM, type);
FUNCTION_LOG_PARAM(ENUM, mode);
- FUNCTION_LOG_PARAM(STRING, pass);
+ FUNCTION_TEST_PARAM(STRING, pass); // Use FUNCTION_TEST so passphrase is not logged
FUNCTION_LOG_END();
ASSERT(filterGroup != NULL);
