412426 - Sending email from "outside" (i.e. link) while not logged does not accept correct password

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Paolo MARINI ♂]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11
Build Identifier: version 2.0.0.9 (20071031)

I think that I've used this feature quite a few times before but never noticed this problem... it started only a week or so ago.
Basically when I send an email before opening Thunderbird in the morning (in scenarios like from a browser or other mail-enabled software) and entering the Master Password, it doesn't accept it and I was quite worried that it was a bogus dialog and someone stole my password...
No matter how many times I try, it will not let me through.
If I cancel the Master Password dialog I am then prompted for the individual account password and I can enter it and successfully send the email.
If I then load Thunderbird and try opening an account, I'm prompted again for the Master Password and this time it works fine.
But if I quit and try again from say Firefox, it fails again.
Any idea ?
Thanks

Reproducible: Always

Steps to Reproduce:
1. Start computer (boot OS)
2. Send an email from any mail-enabled software (when Thunderbird is the default), or for instance send a page link from Firefox
3. Master Password dialog is displayed but won't accept correct password
Actual Results:  
correct Master Password is not accepted, account password then works fine

Expected Results:  
correct Master Password should be accepted

a couple of add-ons installed but no new one recently

Comment 1

[Wayne Mery (:wsmwk)]

as far as I can tell, in thunderbird 3, it does not prompt for the master pwd on sending if 3pane has not been brought up.

If you want to test this, http://www.mozillamessaging.com/en-US/thunderbird/early_releases/ and make sure you backup your profile before running.  Note: version 3 still has are other password issues