storm/barnard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove UDP crypto secrets from logs

Browse Source
This commit is contained in:
Brandon McGinty (chatgpt)
2026-08-09 14:20:42 -04:00
committed by Brandon McGinty
parent 6ab37b18d8
commit 12dfa562d2
3 changed files with 4 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fix.txt
+1 -1
View File
@@ -9,7 +9,7 @@ vendored Mumble C++ source were not treated as files to modify.
Priority 0: security and crashers
---------------------------------
1. UDP crypto secrets are logged
[x] 1. UDP crypto secrets are logged
Files: gumble/gumble/udp15.go, gumble/gumble/crypt.go
Both crypto setup paths log the AES key and IV/nonce material at debug
level. Anyone who obtains debug logs and a packet capture can decrypt