search

QuickBlox / quickblox-android-sdk

QuickBlox Android SDK includes code snippets with main use cases and framework JAR library.
BSD 3-Clause "New" or "Revised" License
416 stars 697 forks source link

Security Exception #365

Closed ubarua123 closed 7 years ago

ubarua123 commented 7 years ago

Help avoid duplicate issue reports, check [existing issues](link to issues section of repo)

Environment details (Operating system, browser information, SDK version) Android OS- 4.1.3, 4.3 SDK version - 3.2.0

Did this work before? This is the first release with QB

Expected behavior Should not crash

Actual behavior App crashes

Logs (please, use github gist)

Exception:

Caused by java.lang.SecurityException: new SecureRandom() backed by wrong Provider: class com.quickblox.auth.secure.AesCbcWithIntegrity$PrngFixes$a at com.quickblox.auth.secure.AesCbcWithIntegrity$PrngFixes.installLinuxPRNGSecureRandom(SourceFile:699) at com.quickblox.auth.secure.AesCbcWithIntegrity$PrngFixes.apply(SourceFile:618) at com.quickblox.auth.secure.AesCbcWithIntegrity.fixPrng(SourceFile:281) at com.quickblox.auth.secure.AesCbcWithIntegrity.generateKeyFromPassword(SourceFile:139) at com.quickblox.auth.secure.SecurePreferences.(SourceFile) at com.quickblox.auth.secure.SecurePreferences.(SourceFile) at com.quickblox.auth.session.a.(SourceFile) at com.quickblox.auth.session.QBSessionManager.init(SourceFile:49) at com.quickblox.auth.session.QBSettings.init(SourceFile:124)

Got this on a live app.

vfite commented 7 years ago

Hi there, Try sdk version 3.3.0. 3.3.0 should fix this issue.