doveconf: Do not skip over secrets when hiding them

All candidates for hiding need to be considered, otherwise
it might skip over some of them and leave them unhidden.

diff --git a/src/config/doveconf.c b/src/config/doveconf.c
index c574350f9e382ca6ff64c584b7e2b8a0b4a6650e..53844279066b039b62c3212b2ca608a8dccf4c11 100644 (file)
--- a/src/config/doveconf.c
+++ b/src/config/doveconf.c
@@ -182,14 +182,17 @@ static bool value_need_quote(const char *value)
 static const char *find_next_secret(const char *input, const char **secret_r)
 {
        const char *const *secret;
+       const char *ptr = NULL;
        for(secret = secrets; *secret != NULL; secret++) {
-               const char *ptr;
-               if ((ptr = strstr(input, *secret)) != NULL) {
-                       *secret_r = *secret;
-                       return ptr;
+               const char *cptr;
+               if ((cptr = strstr(input, *secret)) != NULL) {
+                       if (ptr == NULL || cptr < ptr) {
+                               *secret_r = *secret;
+                               ptr = cptr;
+                       }
                }
        }
-       return NULL;
+       return ptr;
 }
 
 static bool