1869330 - remove primary password fails "Unable to change Primary Password." code: 0x805a1f65 [nsIPK11Token.changePassword] in removemp.js

Status: NEW

(Thunderbird :: Security, defect)

Description

[Wayne Mery (:wsmwk)]

120.0b5 on Mac. I haven't yet tried Firefox

Removing per https://support.mozilla.org/en-US/kb/use-primary-password-protect-stored-logins#w_remove-the-primary-password fails

09:53:03.703 Uncaught : Component returned failure code: 0x805a1f65 [nsIPK11Token.changePassword]
removePassword chrome://mozapps/content/preferences/removemp.js:44
init chrome://mozapps/content/preferences/removemp.js:26
_fireButtonEvent chrome://global/content/elements/dialog.js:515
_doButtonCommand chrome://global/content/elements/dialog.js:494
_handleButtonCommand chrome://global/content/elements/dialog.js:488

Comment 1

[Wayne Mery (:wsmwk)]

I was not able to reproduce this with Firefox 120.0.1 on Windows.

I am suspecting the cause for rejecting remove the PP is my stored pgp keys. Kai, we have a bug for that I believe?

Comment 2

[Kai Engert (:KaiE:)]

Wayne, I don't understand how you could get that stack.

The code from your exception is firefox code. The Thunderbird privacy settings panel uses TB-specific code to handle the PP, which is in mail/components/preferences/privacy.js and function _removeMasterPassword().

I don't think it's related to your pgp keys, and I don't think we have a bug for that.
I haven't see this error before.

Comment 3

[Kai Engert (:KaiE:)]

(In reply to Kai Engert (:KaiE:) from comment #2)

The code from your exception is firefox code. The Thunderbird privacy settings panel uses TB-specific code to handle the PP, which is in mail/components/preferences/privacy.js and function _removeMasterPassword().

Ah sorry, our code calls that code.

Comment 4

[Wayne Mery (:wsmwk)]

I was unable to reproduce this on Windows with 119 beta and 121 beta.

Comment 5

[Magnus Melin [:mkmelin]]

Seems to work fine on linux/trunk.

Comment 6

[Wayne Mery (:wsmwk)]

Fails on the third line
removePassword() {
if (this._token.checkPassword(this._password.value)) {
this._token.changePassword(this._password.value, "");

FWIW, it's failing on a single lower case character. Which is also what I've been using on systems where it succeeds.

Comment 7

[Wayne Mery (:wsmwk)]

Also fails for https://support.mozilla.org/en-US/questions/1437440

https://support.mozilla.org/mk/questions/1409077 suggests the following should work:
paste 'openDialog("chrome://pippki/content/resetpassword.xhtml")' into the error console