New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 619672 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Aug 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Corrupted passwords saved

Reported by sachoub...@gmail.com, Jun 13 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36

Steps to reproduce the problem:
I save my password after logging into a website (any website) and wait for some time (several days).

What is the expected behavior?
My passwords are supposed to be saved and synced on all my devices.

What went wrong?
After my login and password are saved for a website, I can login into the website normally for several days on any of my devices (laptop, smartphone, computer...).
But after a few days, the password is replaced with a random string that is hundreds of caracters long, which is not my password. 

For instance, I have saved a password that is about 10 caracters long for a website, and when I look at the password that is saved on password.google.com, the password that is shown is: "sO8fo03EP/Adhf8d1XAImQChUtRZ8WaeygoI9DdY3S9ZnbKZggXmxgHIVNSPJhyb8BUKGKYFUYvbaSX+bs4z/PUKCVXBsgsTGkFKcRiNTpCkI8m8mEg70MUokSc0o/i8Jdy77ZN6poHXmxLdrWJRAHbSy8RG5CehFYGbQvAgRa7f6XcwL/rjIaLR99aiwAZeNu7+YrG/pkMpRxXDctl6w3S/U1wKGEz9vqwV0DyK6DSyyEqrBeoO+/eypTDIH8fkNxr4ya19KCXZByRbM8f2WsSLWescooiNFHXR/CeLwV7SZqIuX2SMAVIF8/N/XQLf3ud1TjUfbFAu+F+BumxO6Q=="

Things started to go bad after all of my password disappeared a few weeks ago without any sensible reason.

Did this work before? Yes April 2016

Chrome version: 51.0.2704.84  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 21.0 r0

It doesn't depend on the device on which I save the password.
 

Comment 1 by plaree@chromium.org, Jun 13 2016

Cc: jnaveen@chromium.org plaree@chromium.org
I have just tested and the saved passwords are syncing correctly to all the devices. Also the saved passwords are displayed properly in passwords.google.com. I have also checked my personal account which has lots of saved passwords but did not find any issues.

@sachouba60, are you seeing this on both passwords.google.com and chrome://settings/passwords? also could you please attach a screenshot of the corrupted passwords?
Labels: Needs-Feedback
Could we get a screenshot of chrome://sync-internals? Additionally, do we have your permission to inspect your server data? (We cannot see plaintext passwords, only encrypted blobs.) 
Owner: maxbogue@chromium.org
@jnaveen :
Yes, I see the issue on both passwords.google.com and chrome://settings/passwords.
Here is a screenshot of both, with one of the corrupted passwords (all the very long passwords you can see on the right are corrupted). I have hidden my usernames.

@maxbogue :
Here is a screenshot of chrome://sync-internals. You have my permission to inspect my server data.
chrome.png
31.6 KB View Download
chrome 2.png
31.7 KB View Download
sync-internals.png
178 KB View Download
Project Member

Comment 6 by sheriffbot@chromium.org, Jun 16 2016

Labels: -Needs-Feedback Needs-Review
Thank you for providing more feedback. Adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 7 by yiinho@chromium.org, Jun 16 2016

In order to debug this issue, it will be really helpful if we can look into logs and data from server side to determine exactly how the data corruption might have happen. Could we get a permission to look at the data please?
Labels: Needs-Feedback
@sachouba60, could you please respond to comment 7?
Owner: pav...@chromium.org
@sachouba60 already gave permission to look into the server data in comment #5
I identified a few passwords with overly large encrypted blob, they all were created on Andriod phone running dev version of M46 chrome (Chrome ANDROID-PHONE 46.0.2490.92 (64cec2c590637d598803e37215e4cc731f8411ca)-devel,gzip(gfe))
Some were created and never modified after that, some were modified but length of values before and after matched, so I don't think password was replaced with long value.

Could you try to update to latest stable version to see if it helps?


I found two large groups of deleted passwords, one on April 9 with ~40 passwords, another on May 30 with ~20 passwords, but I couldn't see which device deleted them since logs have expired.

 sachouba60@: Please post on this bug if in the future you notice that large number of passwords get deleted?
Status: WontFix (was: Unconfirmed)
I cannot figure out the cause of this issue with current set of information.
Closing it as NotRepro for now. Feel free to reopen if issue repeats.

Sign in to add a comment