[Pidgin] #15295: Pidgin leaks pidgin & libpurple version number & time data.

Pidgin trac at pidgin.im
Thu Sep 20 20:29:18 EDT 2012


#15295: Pidgin leaks pidgin & libpurple version number & time data.
---------------------------------+----------------------
 Reporter:  malaparte            |       Owner:  bleeter
     Type:  defect               |      Status:  new
Milestone:                       |   Component:  privacy
  Version:  2.10.6               |  Resolution:
 Keywords:  security, libpurple  |
---------------------------------+----------------------

Comment (by bleeter):

 jabber_iq_version_parse in jabber prpl iq.c, the OS stuff is already #if
 0'd out. That may have been what others were thinking of when they
 suggested they thought they'd already stopped responding to iq:version.
 Now I'm wondering why the rest wasn't removed, too.

-- 
Ticket URL: <https://developer.pidgin.im/ticket/15295#comment:2>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list