5

Images from another user displayed in message · Issue #10247 · signalapp/Signal-...

 3 years ago
source link: https://github.com/signalapp/Signal-Android/issues/10247
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Bug description

Standard conversation between two users (let's call them party A and party B). Party A shares a gif (from built in gif search). Party B receives the gif, but also some other images, which appear to be from another user (party A has searched their phone and does not remember the images in question). Best case the images are from another contact of B and messages got crossed, worst case they are from an unknown party, who's data has now been leaked. Luckily in this case they were not sensitive.

Steps to reproduce

  • Steps as above
  • I really have no idea how to reproduce

Actual result: Images which were not sent by party A appear in party B's conversation
Expected result: Images from different conversations/users shouldn't leak

Screenshots

Party A:
Party B:

Device info

Party A:
Device: Samsung A30
Android version: 10 (seems somewhat non-specific, but that's what the UI shows, happy to provide more info on request)
Signal version: 4.78.5

Party B:
Device: Motorola Moto G7 Power
Android version: 10
Signal version: 4.78.5

Link to debug log

Party A: https://debuglogs.org/ff7236bae38ec64dbe4cd2b57a22c32ea45c6a5025e59cc19447b9eca4e9fe66 (was taken some time after the issue occurred, next time I'll be quicker)

Party B: https://debuglogs.org/02d5cea4bfd6d6c046c1e6d2cfca26093cf4242ad99483bb3fbdff52844a09a4 (also taken some time after the issue occurred)

I'm still awaiting device info and debug logs from Party B, I'll update when I have them. EDIT: now complete.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK