[Webkit-unassigned] [Bug 18630] WebKit r31381 History Data Overwrites ~/Library/Keychains/login.keychain

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Sun Oct 14 06:33:52 PDT 2018


https://bugs.webkit.org/show_bug.cgi?id=18630

David Lee <davidlee54498 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |davidlee54498 at gmail.com

--- Comment #5 from David Lee <davidlee54498 at gmail.com> ---
The copy of the keychain made after closing out WebKit was roughly the same size, but filled with random bytes of information in place of my history. A sample is also provided below.

This behavior is deeply, deeply disturbing. I never imagined such a disastrous event could happen. It certainly merits investigation on the part of the developers, as even a small percentage of users experiencing this scenario could be a very serious problem.

While I haven't spent enough time reverse-engineering the keychain file format to fully grasp it, I can definitely say that a portion of my keychain, particularly the headers which are critical to having a usable keychain file (and appear to also include some kind of checksum value for the file) have been overwritten. However, I can also confirm that a large portion of the keychain data is still intact.

While I realize that Apple is not responsible for the performance of developmental software like this, I would greatly appreciate it if somebody over at Apple would put me in touch with a Keychain software engineer who might provide more information on the file format and/or how I could achieve at least a partial http://bottomstack.com/best-paper-shredders/ recovery of the critical contents of my keychain. I have some very important information in there and was caught at an inopportune time due to my backup issues.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20181014/d5e36454/attachment.html>


More information about the webkit-unassigned mailing list