Master password unusable if it contains non-US characters

RESOLVED DUPLICATE of bug 252436

Status

Core Graveyard
Security: UI
RESOLVED DUPLICATE of bug 252436
13 years ago
2 years ago

People

(Reporter: Bruno Viaris, Unassigned)

Tracking

1.8 Branch
x86
All

Firefox Tracking Flags

(Not tracked)

Details

(Reporter)

Description

13 years ago
User-Agent:       Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20051004 Firefox/1.0.7
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8) Gecko/20051111 Firefox/1.5

If you supply a master password with accents (tried with "à" (agrave) and "é" (eacute)), firefox accepts it in the "change password" popup, but this
password is then never recognised in the master password prompt popups (for stored passwords or certificates)
The master password can still be removed or changed in the "change password" popup where it is correctly recognized.
I suppose that accents are not handled the same way in this two kind of popus prompts

Tested on versions: 
1.0.7 (linux and winxp/2k)
1.5RC3 (winxp)

Sugested quickfix: refuse master passwords with non-US characters

Reproducible: Always

Steps to Reproduce:
1. set a master password containing accents
2. make firefox ask for it (for instance Options/Advanced/Certificates/Manage Security Devices/Login) -> password refused
3. Change master password -> Current password (with accents) is recognized, saved passwords or certificates are correctly decrypted and re-encrypted with the new password

Actual Results:  
you spend much time retyping your password with care, trying variants, doubting about what you used as master password, fearing to have lost precious certificates. You may actually loose data if you get finally convinced that you forgot your password and decide to erase the protected data

Comment 1

13 years ago

*** This bug has been marked as a duplicate of 252436 ***
Status: UNCONFIRMED → RESOLVED
Last Resolved: 13 years ago
Component: Password Manager → Security: UI
Product: Firefox → Core
Resolution: --- → DUPLICATE
Version: unspecified → 1.8 Branch
(Assignee)

Updated

2 years ago
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.