Issue tracker for GrapheneOS Android Open Source Project hardening work. Standalone projects like Auditor, AttestationServer and hardened_malloc have their own dedicated trackers.
Using a store shopping app where you can add payment cards (visa, Mastercard, etc...) to pay in stores. When trying to add a card in that app, if 3D-secure is not enabled on the payment card, gsmcompat will crash, and the store app will of course say that the card cannot be added due to the missing 3D-secure support.
After enabling 3D-secure on the payment card, everything works fine (gsmcompat doesn't crash anymore, and the card is added correctly to the app).
Here is the gsmcompat crash log:
type: crash
osVersion: google/husky/husky:15/AP3A.241105.007/2024110700:user/release-keys
package: com.google.android.gms:244337036, targetSdk 35
sharedUid: com.google.uid.shared
process: com.google.android.gms
processUptime: 113778938 + 359 ms
installer: com.android.vending
GmsCompatConfig version: 149
java.lang.IllegalArgumentException: Account cannot be null
at tbq.b(:com.google.android.gms@244337036@24.43.37 (260408-693941914):51)
at tbq.i(:com.google.android.gms@244337036@24.43.37 (260408-693941914):1)
at tbq.g(:com.google.android.gms@244337036@24.43.37 (260408-693941914):6)
at dwii.a(:com.google.android.gms@244337036@24.43.37 (260408-693941914):196)
at dwoy.M(:com.google.android.gms@244337036@24.43.37 (260408-693941914):10)
at dwmw.M(:com.google.android.gms@244337036@24.43.37 (260408-693941914):3)
at dwpv.f(:com.google.android.gms@244337036@24.43.37 (260408-693941914):182)
at brbh.fI(:com.google.android.gms@244337036@24.43.37 (260408-693941914):1)
at brbt.run(:com.google.android.gms@244337036@24.43.37 (260408-693941914):66)
at eved.run(:com.google.android.gms@244337036@24.43.37 (260408-693941914):21)
at annu.c(:com.google.android.gms@244337036@24.43.37 (260408-693941914):50)
at annu.run(:com.google.android.gms@244337036@24.43.37 (260408-693941914):76)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:644)
at ante.run(:com.google.android.gms@244337036@24.43.37 (260408-693941914):8)
at java.lang.Thread.run(Thread.java:1012)
Suppressed: eveo:
at tk_trace.4-getPaymentCardRecognitionIntent(Unknown Source:0)
at tk_trace.wallet-PaymentChimeraService-IOwService_23(Unknown Source:0)
Using a store shopping app where you can add payment cards (visa, Mastercard, etc...) to pay in stores. When trying to add a card in that app, if 3D-secure is not enabled on the payment card, gsmcompat will crash, and the store app will of course say that the card cannot be added due to the missing 3D-secure support.
After enabling 3D-secure on the payment card, everything works fine (gsmcompat doesn't crash anymore, and the card is added correctly to the app).
Here is the gsmcompat crash log: