After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 701649 - empathy will give user information after the account was deleted
empathy will give user information after the account was deleted
Status: RESOLVED FIXED
Product: empathy
Classification: Core
Component: General
3.8.x
Other Linux
: Normal normal
: ---
Assigned To: empathy-maint
empathy-maint
Depends on:
Blocks:
 
 
Reported: 2013-06-05 13:46 UTC by Ewan.LEBIDEAU-CANEVET
Modified: 2013-07-09 15:44 UTC
See Also:
GNOME target: ---
GNOME version: 3.7/3.8


Attachments
Reset the account setup message if the only account is deleted (1.59 KB, patch)
2013-07-09 01:20 UTC, Travis Reitter
accepted-commit_now Details | Review

Description Ewan.LEBIDEAU-CANEVET 2013-06-05 13:46:17 UTC
Steps:
1. Open Empathy (click Skip when you see the window asking you to fill in your first name, last name and nickname)
2. The Messaging and VOIP Accounts window will show
3. Click the plus sign to add a new account
4. Select Facebook Chat account and fill in your Facebook username and password (untick remember password) and proceed
5. When asked about the Untrusted connection click continue
6. Signout from account windowd and delete the account that you've created

result: last user's login can be seen in chat window
expected: no trace of user account should be left
Comment 1 Travis Reitter 2013-07-09 01:20:27 UTC
Created attachment 248686 [details] [review]
Reset the account setup message if the only account is deleted
Comment 2 Guillaume Desmottes 2013-07-09 15:37:06 UTC
Review of attachment 248686 [details] [review]:

++
Comment 3 Travis Reitter 2013-07-09 15:44:14 UTC
Merged:

commit 8991b0bd4316261776e7093aeae3534c68183722
Author: Travis Reitter <travis.reitter@collabora.co.uk>
Date:   Mon Jul 8 17:08:07 2013 -0700

    Remove the name of an account once it has been deleted.
    
    This fixes a minor security issue where information about an account (its
    name) could be displayed after the point it was deleted. It only lasted
    until Empathy was quit. This patch ensures the name is scrubbed from Empathy
    immediately.
    
    Bug: https://bugzilla.gnome.org/show_bug.cgi?id=701649

 src/empathy-roster-window.c | 10 ++++++++++
 1 file changed, 10 insertions(+)