thunderbird / thunderbird/thunderbird-android
Private information leak into debug log
Nobody has claimed this yet.
- Dominant language
- Kotlin
- Stars
- 14k
- Forks
- 2.8k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 57
Description
Describe the bug
Full contact detail are present within the debug log.
09-20 17:13:45.489 17669 19640 V RealImapConnection: From: John Doe john@doe.com
09-20 17:13:45.489 17669 19640 V RealImapConnection: To: jane@doe.com
To Reproduce
Steps to reproduce the behavior:
- Enable debug logging
- Follow the guide
Expected behavior
Don't log that information or obfuscate it.
Environment (please complete the following information):
- K-9 Mail version: 5.900
- Android version: 10
- Device: Samsung S9
- Account type: IMAP
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the RealImapConnection debug output shown in the report and follow the linked LoggingErrors guide to reproduce it with IMAP debug logging enabled. Trace where the From and To details are logged; done means contact information is no longer exposed or is obfuscated in the debug log.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kotlin
- Domain
- mobile, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100