static inline char *find_param_list(char *path, size_t path_l, char delim)
{
	char *p;

	p = memchr(path, delim, path_l);
	return p ? p + 1 : NULL;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.