Open Bug 727574 Opened 12 years ago Updated 2 years ago

Sync is losing passwords somehow

Categories

(Firefox :: Sync, defect)

x86_64
Windows 7
defect

Tracking

()

UNCONFIRMED

People

(Reporter: HawanTB, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: [sync:passwords])

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0a2) Gecko/20120215 Firefox/12.0a2
Build ID: 20120215042007

Steps to reproduce:

I'm using 2 Firefox versions.
Aurora and Release on day by day basis connected together through Sync

SECURITY - BECAUSE THIS ENTRY *MIGHT BE* HINT FOR POTENTIALY HIGHLY DANGEROUS EXPLOIT TO CRACKERS


Actual results:

i'm seeing that sync is losing some passwords without my knowledge - i'm not deleting any, sometimes it happen itself

there must be some memory leaks or some instabilities that are cause to this issue


Expected results:

sync shouldn't remove passwords without my permission or unattended
Group: core-security
Component: Untriaged → Firefox Sync: Backend
Product: Firefox → Mozilla Services
QA Contact: untriaged → sync-backend
Version: 12 Branch → unspecified
It may not be Sync, but if something is deleting passwords through API calls, we'll propagate that change.  If passwords are being deleted, I would recommend you set "signon.debug" to true in about:config and see what's going on.
Where should I look for debug logs from signon.debug = true ?
I encountered the same issue on Linux 64 bits (Ubuntu).

In my case, it might have been a consistency issue linked to the use of the Saved Password Editor.
If you can provide reliable steps to reproduce or provide a sync log showing sync deleting passwords, we can look into this.

https://philikon.wordpress.com/2011/06/13/how-to-file-a-good-sync-bug/

The current reports don't give us a lot to go on to track this down. All I can say is "it works for me."
How do you get a Sync log? I tried setting signon.debug = true, but the output only goes to the error console.
OK, I have set up the sync log and I'm going to try to reproduce
the problem. I will keep you posted.
Any update, Jean-Philippe?
Flags: needinfo?(jean-philippe.guerard)
Whiteboard: [sync:passwords]
I've narrowed it to disappearing history. (if all website history is removed firefox will remove credentials)

not sure why was it happening (later stopped using 2 versions of FF)
If you have Firefox set to remove saved passwords on exit, then yes, Firefox will remove credentials. Is that what you mean?
No it's not (and weren't) set to remove passwords.
I were using beta/nightly versions (now only Aurora). Somehow, sometimes some passwords were gone - without my interference.
Nothing new on my side. But I'm not registering new passwords every day. I'll keep you posted if it happens again.
Flags: needinfo?(jean-philippe.guerard)
Component: Firefox Sync: Backend → Sync
Product: Cloud Services → Firefox
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.