Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upstream ClearUndecryptablePasswordsInSync Windows fix #24853

Conversation

cdesouza-chromium
Copy link
Collaborator

@cdesouza-chromium cdesouza-chromium commented Jul 25, 2024

Fixes brave/brave-browser#40091

There has been some issue in chromium, and other browsers, where passwords are being dropped for some users. This is an upstream of a patch pushed to chromium to correct this issue on windows.

Chromium change:
https://chromium.googlesource.com/chromium/src/+/641093c7627684a6c04986531209783f430fb205

commit 641093c7627684a6c04986531209783f430fb205
Author: Viktor Semeniuk <[email protected]>
Date:   Thu Jul 25 16:45:55 2024 +0000

    Enable ClearUndecryptablePasswordsInSync on Windows

    This feature has to be enabled together with SkipUndecryptablePasswords
    otherwise user won't be able to enable sync if they have undecryptable
    passwords.

    Bug: 354847250

Resolves

Submitter Checklist:

  • I confirm that no security/privacy review is needed and no other type of reviews are needed, or that I have requested them
  • There is a ticket for my issue
  • Used Github auto-closing keywords in the PR description above
  • Wrote a good PR/commit description
  • Squashed any review feedback or "fixup" commits before merge, so that history is a record of what happened in the repo, not your PR
  • Added appropriate labels (QA/Yes or QA/No; release-notes/include or release-notes/exclude; OS/...) to the associated issue
  • Checked the PR locally:
    • npm run test -- brave_browser_tests, npm run test -- brave_unit_tests wiki
    • npm run presubmit wiki, npm run gn_check, npm run tslint
  • Ran git rebase master (if needed)

Reviewer Checklist:

  • A security review is not needed, or a link to one is included in the PR description
  • New files have MPL-2.0 license header
  • Adequate test coverage exists to prevent regressions
  • Major classes, functions and non-trivial code blocks are well-commented
  • Changes in component dependencies are properly reflected in gn
  • Code follows the style guide
  • Test plan is specified in PR before merging

After-merge Checklist:

Test Plan:

See brave/brave-browser#40091

There has been some issue in chromium, and other browsers, where
passwords are being dropped for some users. This is an upstream of a
patch pushed to chromium to correct this issue on windows.

Chromium change:
https://chromium.googlesource.com/chromium/src/+/641093c7627684a6c04986531209783f430fb205

commit 641093c7627684a6c04986531209783f430fb205
Author: Viktor Semeniuk <[email protected]>
Date:   Thu Jul 25 16:45:55 2024 +0000

    Enable ClearUndecryptablePasswordsInSync on Windows

    This feature has to be enabled together with SkipUndecryptablePasswords
    otherwise user won't be able to enable sync if they have undecryptable
    passwords.

    Bug: 354847250
@cdesouza-chromium cdesouza-chromium self-assigned this Jul 25, 2024
@cdesouza-chromium cdesouza-chromium requested a review from a team as a code owner July 25, 2024 19:22
@bsclifton
Copy link
Member

NOTE: this may help partially resolve brave/brave-browser#33548

Although that does happen on macOS also

Copy link
Contributor

The security team is monitoring all repositories for certain keywords. This PR includes the word(s) "password" and so security team members have been added as reviewers to take a look.

No need to request a full security review at this stage, the security team will take a look shortly and either clear the label or request more information/changes.

Notifications have already been sent, but if this is blocking your merge feel free to reach out directly to the security team on Slack so that we can expedite this check.

Copy link
Contributor

@emerick emerick left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we just add the issue to the description?

@cdesouza-chromium cdesouza-chromium merged commit 9ed8601 into master Jul 25, 2024
17 checks passed
@cdesouza-chromium cdesouza-chromium deleted the enable-clear-undecryptable-passwords-in-sync-upstream-fix branch July 25, 2024 22:23
@github-actions github-actions bot added this to the 1.70.x - Nightly milestone Jul 25, 2024
brave-builds added a commit that referenced this pull request Jul 26, 2024
brave-builds added a commit that referenced this pull request Jul 26, 2024
@bsclifton
Copy link
Member

Created and linked issue brave/brave-browser#40091

@kjozwiak
Copy link
Member

kjozwiak commented Jul 30, 2024

Verification PASSED on Win 11 x64 using the following build(s):

Brave | 1.70.36 Chromium: 127.0.6533.73 (Official Build) nightly (64-bit)
-- | --
Revision | 23e4fbbe30cb67e7592dbf19501231ddad555b2e
OS | Windows 11 Version 23H2 (Build 22631.3958)

Using the STR/Cases via brave/brave-browser#40091 (comment), ensured that the decryptable passwords are being restored once Sync has been enabled and Passwords is toggled on via Sync:

Example Example Example Example Example
fix1 fix2 fix3 fix4 fix5

kjozwiak pushed a commit that referenced this pull request Jul 30, 2024
kjozwiak pushed a commit that referenced this pull request Jul 30, 2024
@Saoiray
Copy link

Saoiray commented Jul 31, 2024

@bsclifton and @kjozwiak I stumbled across this but also notice it only mentions Windows. Will this also not affect people on Mac and Linux who have had the same issue? Or is that going to need a different fix?

Also, when should this land? Assuming today?

@bsclifton
Copy link
Member

@Saoiray this landed today with version 1.68.134. As you noticed, it only affects Windows.

We're tracking the larger issue with brave/brave-browser#33548 - you can check there for updates 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Fix passwords not showing for some Windows users who have sync enabled
7 participants