Skip to content

CFE-3293: make callers declare intent when reading a variable - #6304

Open
nickanderson wants to merge 1 commit into
cfengine:masterfrom
nickanderson:CFE-3293-accessor-split/master
Open

CFE-3293: make callers declare intent when reading a variable#6304
nickanderson wants to merge 1 commit into
cfengine:masterfrom
nickanderson:CFE-3293-accessor-split/master

Conversation

@nickanderson

@nickanderson nickanderson commented Aug 18, 2026

Copy link
Copy Markdown
Member

EvalContextVariableGet() always returned the plaintext value, so a caller had no
way to ask for a secret-tagged variable to be redacted. This adds a get_secret
parameter, plus EvalContextVariableGetPlaintext() and friends, and moves all 20
existing call sites onto the plaintext form.

No behaviour change: every call site asks for plaintext, exactly as before. It is
the groundwork for the CFE-3294 leak fixes, which switch selected sites over.

EvalContextVariableGet() always returned the plaintext value, so a caller had
no way to ask for a secret-tagged variable to be redacted. Adds a get_secret
parameter and *Plaintext wrappers, and moves every existing caller onto the
plaintext form.

No behaviour change: every call site asks for plaintext, exactly as before.

Ticket: CFE-3293
Changelog: None
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant