316977 - Master password unusable if it contains non-US characters

Status: RESOLVED DUPLICATE of bug 252436

(Core Graveyard :: Security: UI, defect)

Description

[Bruno Viaris]

User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20051004 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5

If you supply a master password with accents (tried with "à" (agrave) and "é" (eacute)), firefox accepts it in the "change password" popup, but this
password is then never recognised in the master password prompt popups (for stored passwords or certificates)
The master password can still be removed or changed in the "change password" popup where it is correctly recognized.
I suppose that accents are not handled the same way in this two kind of popus prompts

Tested on versions: 
1.0.7 (linux and winxp/2k)
1.5RC3 (winxp)

Sugested quickfix: refuse master passwords with non-US characters

Reproducible: Always

Steps to Reproduce:
1. set a master password containing accents
2. make firefox ask for it (for instance Options/Advanced/Certificates/Manage Security Devices/Login) -> password refused
3. Change master password -> Current password (with accents) is recognized, saved passwords or certificates are correctly decrypted and re-encrypted with the new password

Actual Results:  
you spend much time retyping your password with care, trying variants, doubting about what you used as master password, fearing to have lost precious certificates. You may actually loose data if you get finally convinced that you forgot your password and decide to erase the protected data

Comment 1

[Josh Birnbaum]

*** This bug has been marked as a duplicate of 252436 ***