CR-19: scan-style guard for key material and content across logs, toString, metrics and exceptions #156
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Review finding 2026-08-27 (D2). Six spot checks stand in for "never": the only
KatrixLog.installin tests is on a crypto-less session; notoStringassertions onInboundGroupSessionRecord,IdentityRecord,UtdRecord,SendItem; no metrics-stream scan; exception-chain scan covers three failures.Acceptance (CR-19, §9): a log sink installed in
SessionCryptoTest/UtdRedecryptorTest/BackupRestoreEndToEndTestgrepping every line, everyMetricEvent.toString()and every thrown chain for the session's pickles, megolm keys, recovery key and message markers;toStringguards on every secret-bearing record.