[Pidgin] #14830: dbus information leakage

Pidgin trac at pidgin.im
Mon Feb 27 19:07:22 EST 2012


#14830: dbus information leakage
------------------------------------+---------------------------------------
 Reporter:  dfunc                   |        Owner:  bleeter
     Type:  enhancement             |       Status:  new    
Milestone:  Patches welcome         |    Component:  privacy
  Version:  2.10.0                  |   Resolution:         
 Keywords:  libpurple dbus plugins  |  
------------------------------------+---------------------------------------

Comment(by hyc):

 Replying to [comment:5 bleeter]:
 > Please note that whilst the information on the leak is correct, I
 believe the wrong 'product' has been labelled as the cause. Pidgin is the
 GTK UI that sits above libpurple. After a cursory look across the code, I
 believe any libpurple client using DBUS would also be exposed to this
 problem, not just Pidgin. There are patches out there for OTR to work with
 Finch, I've not tried it but I'd be surprised if it didn't have the same
 problem. Did you test these and were you able to confirm it's ONLY in
 Pidgin?

 Fyi, only pidgin looks for and connects to DBUS in its startup
 initialization. Finch does not.

 > Here's a quick list of other products using libpurple.
 > http://developer.pidgin.im/wiki/WhatIsLibpurple

 I haven't checked other apps to see what they do...

-- 
Ticket URL: <http://developer.pidgin.im/ticket/14830#comment:18>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list