microg / microg/GmsCore

Safetynet Attestation failed

Open
#3,060 21 comments 3 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Java
Stars
14.6k
Forks
3.2k
Avg merge
12d 11h
Merged PRs (30d)
4

Description

Describe the bug
During do test safetynet attestation, got failed

To Reproduce
Steps to reproduce the behavior:

  1. open Microg
  2. goto google safetynet
  3. click test SafetyNet attestation

Expected behavior
got success Safetynet attestation. (usually not failed with this exception)

Screenshots
If applicable, add screenshots to help explain your problem.

System
Android Version: 10
Custom ROM: LineageOS 17.1-20220415-microg-wt88047
Microg Version : 0.3.7.250932

Additional context
this is snipping from logcat.

09-16 13:15:24.558  5070  5070 W GmsSafetyNet: Exception during attest: java.io.IOException
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: java.io.IOException: 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
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at org.microg.gms.safetynet.Attestation.attest(Attestation.java:178)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at org.microg.gms.safetynet.Attestation.attest(Attestation.java:150)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at org.microg.gms.safetynet.SafetyNetClientServiceImpl$attestWithApiKey$1$jwsResult$1.invokeSuspend(SafetyNetClientService.kt:104)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlin.coroutines.jvm.internal.BaseContinuationImpl.resumeWith(ContinuationImpl.kt:33)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.DispatchedTask.run(DispatchedTask.kt:108)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.internal.LimitedDispatcher$Worker.run(LimitedDispatcher.kt:115)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.scheduling.TaskImpl.run(Tasks.kt:103)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.scheduling.CoroutineScheduler.runSafely(CoroutineScheduler.kt:584)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.executeTask(CoroutineScheduler.kt:793)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.runWorker(CoroutineScheduler.kt:697)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at kotlinx.coroutines.scheduling.CoroutineScheduler$Worker.run(CoroutineScheduler.kt:684)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: Caused by: java.util.zip.ZipException: Not in GZIP format
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at java.util.zip.GZIPInputStream.readHeader(GZIPInputStream.java:174)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:83)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at java.util.zip.GZIPInputStream.<init>(GZIPInputStream.java:100)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	at org.microg.gms.safetynet.Attestation.attest(Attestation.java:175)
09-16 13:15:24.558  5070  5070 W GmsSafetyNet: 	... 10 more 

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with org.microg.gms.safetynet.Attestation.attest at Attestation.java lines 150, 175, and 178, then inspect SafetyNetClientService.kt line 104. Reproduce the SafetyNet test on the reported Android and microG versions and examine the logged 404 response and GZIP exception; done means the attestation request completes successfully or the failure is handled correctly.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java, kotlin
Domain
authentication, mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.