649907 - Thunderbird sometimes loses passwords if master password prompt is answered too slowly

Status: RESOLVED WORKSFORME

(Thunderbird :: Security, defect)

Description

[Theodore Lee]

User-Agent:       Mozilla/5.0 (X11; Linux x86_64; rv:2.0) Gecko/20100101 Firefox/4.0
Build Identifier: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.15) Gecko/20110403 Fedora/3.1.9-6.fc15 Thunderbird/3.1.9

If the master password prompt in Thunderbird isn't answered before its connection(s) to the mail server(s) time out, it displays several 'failed to connect' dialogues. If 'cancel' is clicked on these dialogues, Thunderbird sometimes deletes the associated saved passwords.

Reproducible: Sometimes

Steps to Reproduce:
1. Start Thunderbird (with saved passwords protected by a master password).
2. Wait for a couple of minutes at the master password prompt.
3. Enter the master password and press enter.
4. Click cancel on the connection failure dialogue(s).
5. Open the list of saved passwords.
Actual Results:  
One or more of the associated passwords was missing.

Expected Results:  
All of the passwords should have been still present.

I'm not absolutely sure that this only happens if 'cancel' is clicked.

Comment 1

[Ludovic Hirlimann [:Usul]]

Pop, imap ? Is autosync enabled ?

Comment 2

[Theodore Lee]

I've only noticed this with IMAP accounts (used with GMail), although those are the only email accounts I use, so this might be occurring elsewhere without me noticing. Automatic synchronisation is enabled for my inbox, sent items, drafts, and starred folders.

Comment 3

[Wayne Mery (:wsmwk)]

Theodore, is this reproducible with version 7 or 8?

Comment 4

[Theodore Lee]

This has always been intermittent for me, but I haven't seen it in quite a while (running versions 7 and 8).

Comment 5

[Joshua Cranmer [:jcranmer]]

RESOLVED WFM per comment 4.