[Webkit-unassigned] [Bug 196969] New: When attestation format is none, Safari returns attestation statement in AuthenticatorAttestationResponse.

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Tue Apr 16 09:27:18 PDT 2019


https://bugs.webkit.org/show_bug.cgi?id=196969

            Bug ID: 196969
           Summary: When attestation format is none, Safari returns
                    attestation statement in
                    AuthenticatorAttestationResponse.
           Product: WebKit
           Version: Safari 12
          Hardware: PC
                OS: macOS 10.14
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebCore JavaScript
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: g0r0kent0 at gmail.com

Area:
Safari

Summary:
When  attestation format is none, Safari returns attestation statement in AuthenticatorAttestationResponse.

Steps to Reproduce:
1. Enable Web Authentication.
2.  Call navigator.credentials.create() after making the attestation option  "none".
3. Confirm the AuthenticatorAttestationResponse.

Expected Results:
Like the following result.
{ fmt: 'none',
  attStmt: {},
  authData:
   <Buffer 49 96 0d e5 88 0e 8c 68 74 34 17 0f 64 76 60 5b 8f e4 ae b9 a2 86 32 c7 99 5c f3 ba 83 1d 97 63 45 5c 7d 1c de ad ce 00 02 35 bc c6 0a 64 8b 0b 25 f1 ... 150 more bytes> 
}

Actual Results:
Like the following result.
{ fmt: 'packed',
  attStmt:
   { alg: -7,
     sig:
      <Buffer 30 46 02 21 00 ce f5 3b 20 7a c5 0f 78 93 db 4f 35 0d 46 47 e1 09 a4 9b c5 63 fc 19 c9 41 93 02 41 21 3e f4 64 02 21 00 9a 2f d7 b4 be f1 05 0f 58 ce ... 22 more bytes>,
     x5c:
      [ <Buffer 30 82 02 be 30 82 01 a6 a0 03 02 01 02 02 04 74 86 fd c2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 2e 31 2c 30 2a 06 03 55 04 03 13 23 59 75 62 ... 656 more bytes> ] },
  authData:
   <Buffer 49 96 0d e5 88 0e 8c 68 74 34 17 0f 64 76 60 5b 8f e4 ae b9 a2 86 32 c7 99 5c f3 ba 83 1d 97 63 41 00 00 01 c1 f8 a0 11 f3 8c 0a 4d 15 80 06 17 11 1f ... 146 more bytes> }

Version/Build:
12.1 (14607.1.40.1.4)

Configuration:
Enable Web Authentication

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190416/c9a08149/attachment.html>


More information about the webkit-unassigned mailing list