Bug#485754: iceweasel: signons2.txt - signons3.txt migration looses saved passwords

2008-06-11 Thread Török Edwin
Package: iceweasel
Version: 3.0~rc2-1
Severity: grave
Justification: causes non-serious data loss


Login/password are no longer filled in automatically for some sites with
Firefox 3. They don't show up in show passwords either.
If I downgrade to Firefox 2 the passwords are automatically filled in again.

I set severity to grave because passwords are lost during conversion.
However I don't need to restore them from backups, the original file is still 
there,
so downgrading to Firefox 2 allows me to use them.

Comparing signons3.txt with signons2.txt I see that 8 sites are missing, for
example:
https://bugs.freedesktop.org
http://sourceforge.net
http://sourceware.org
https://www.securecoding.cert.org
...

Reproducible: Always

Steps to Reproduce:
1. Create a login on one of the example sites above
(https://bugs.freedesktop.org) using Firefox 2
2. Verify that Firefox 2 fills in login/password automatically
2. Install Firefox 3
3. Go to https://bugs.freedesktop.org
Actual Results:  
login/password in not filled in automatically
login/password for site is not in show passwords list.

Expected Results:  
login/password to be filled in automatically, and available in show passwords
list

I can't show you the contents of signons2.txt since its not encrypted, but here
is the portion without the password (replaced with ), #2d is at the
beginning of the file:

#2d
http://localhost:8080
https://www.google.com
.
https://bugs.freedesktop.org
Bugzilla_login
ME
*Bugzilla_password
MD
https://bugs.freedesktop.org
.
http://ac.ahost.ro

This entry is completely missing from signons3.txt:
#2e
http://localhost:8080
https://www.google.com
http://192.168.0.1
.
http://ac.ahost.ro

This command shows 8 missing hosts, maybe you could run a sanity check after
converting the passwords to check that all have been converted?

$ grep http signons2.txt |sort -u list2
$ grep http signons3.txt |sort -u list3
$ diff -w list2 list3|diffstat
 unknown |   10 ++
 1 file changed, 2 insertions(+), 8 deletions(-)

[the insertions are because I registered on this bugzilla, and another one in
the meantime]

Since passwords are lost in the conversion, I set the severity to critical:
causes you to lose data. 
The data isn't actually lost, downgrading to Firefox 2 still allows me to use
it.

Upstream BTS: https://bugzilla.mozilla.org/show_bug.cgi?id=438532

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.25-2-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages iceweasel depends on:
ii  debianutils   2.28.6 Miscellaneous utilities specific t
ii  fontconfig2.5.93-1   generic font configuration library
ii  libc6 2.7-12 GNU C Library: Shared libraries
ii  libglib2.0-0  2.16.3-2   The GLib library of C routines
ii  libgtk2.0-0   2.12.9-4   The GTK+ graphical user interface 
ii  libnspr4-0d   4.7.1-3NetScape Portable Runtime Library
ii  libstdc++64.3.1-1The GNU Standard C++ Library v3
ii  procps1:3.2.7-8  /proc file system utilities
ii  psmisc22.6-1 Utilities that use the proc filesy
ii  xulrunner-1.9 1.9~rc2-2  XUL + XPCOM application runner

iceweasel recommends no packages.

-- debconf-show failed



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#485754: iceweasel: signons2.txt - signons3.txt migration looses saved passwords

2008-06-11 Thread Mike Hommey
severity 485754 important
thanks

On Wed, Jun 11, 2008 at 11:25:28AM +0300, Török Edwin wrote:
 Package: iceweasel
 Version: 3.0~rc2-1
 Severity: grave
 Justification: causes non-serious data loss

As you say, it causes *non-serious* data loss. Therefore this is
not grave.

Mike



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]