iOS 8通知操作:访问"didFinishLaunchingWithOptions"中的keychain时"访问锁定钥匙串时尝试的项目"错误

Question

我正在观察SecItemCopyMatching在锁定的手机上执行iOS 8推送通知时引发的设备控制台中的钥匙串错误.详细的重复步骤如下:

1. 卸载所有以前版本的应用程序.在应用程序上构建应用程序的Appstore版本.强制退出应用程序.
2. 增加内部版本号,并在设备上构建更新版本.这模拟了应用更新流程.强制退出应用程序(在现实生活中,应用程序可能因内存压力而被操作系统杀死.强制退出模拟此行为).
3. 在手机锁定时向应用发送推送通知.
4. 手机锁定后,向左滑动以查看操作按钮,然后按其中一个操作按钮.
5. 应用程序被唤醒,didFinishLaunchingWithOptions被调用,试图访问钥匙串项目.运行时SecItemCopyMatching,Access to item attempted while keychain is locked设备控制台中会显示错误.

完整的错误日志如下所示.最后一行给出了应用程序特定的错误消息.

ReportCrash[32481] <Error>: task_set_exception_ports(B07, 400, D03, 0, 0) failed with error (4: (os/kern) invalid argument)
ReportCrash[32481] <Notice>: ReportCrash acting against PID 31423
diagnosticd[32258] <Error>: error evaluating process info - pid: 31423, punique: 131317
ReportCrash[32481] <Notice>: Formulating crash report for process cfprefsd[31423]
com.apple.xpc.launchd[1] (com.apple.cfprefsd.xpc.daemon[31423]) <Notice>: Service exited due to signal: Bus error: 10
My App[32480] <Error>: assertion failed: 12F70: libxpc.dylib + 71768 [B870B51D-AA85-3686-A7D9-ACD48C5FE153]: 0x7d
Unknown[32480] <Error>: 
ReportCrash[32481] <Notice>: Saved report to /Library/Logs/CrashReporter/cfprefsd_2015-07-02-150139_Xianjing-Hus-iPhone.ips
securityd[32279] <Error>:  s3dl_query_row decode genp,rowid=8099 failed (-25308): The operation couldn’t be completed. (OSStatus error -25308 - ks_crypt: e00002e2 failed to     unwrap item (class 6, bag: 0) Access to item attempted while keychain is locked.)
securityd[32279] <Error>:  securityd_xpc_dictionary_handler Okta Verify[32480] copy_matching The operation couldn’t be completed. (OSStatus error -25308 - ks_crypt:     e00002e2 failed to unwrap item (class 6, bag: 0) Access to item attempted while keychain is locked.)
My App[32480] <Error>:  SecOSStatusWith error:[-25308] The operation couldn’t be completed. (OSStatus error -25308 - Remote error : The operation couldn't be completed. (OSStatus error -25308 - ks_crypt: e00002e2 failed to unwrap item (class 6, bag: 0) Access to item attempted while keychain is locked.))

一些东西:

• 钥匙串项的可访问性设置为kSecAttrAccessibleAlways.
• 从上面的设备日志中可以看出,cfprefsd在问题出现之前总是存在进程崩溃.
• 此问题仅发生在Appstore构建上,而不是发生在调试版本上.
• 只有在尝试对锁定的手机上的通知进行操作时,才会出现此问题.
• 此问题仅在应用程序新更新时发生,如上面的repro步骤中所述.
• 因为我强行退出应用程序,当推送通知到达并按下操作按钮时,我的应用程序将在后台启动.didFinishLaunchingWithOptions被调用,在这个委托方法中,我正在做我的钥匙串访问,它会抛出错误.

有没有人看到类似的错误,如果有的话,你是如何解决这个问题的？任何帮助表示赞赏.

更新:附加cfprefsd崩溃日志

Exception Type:  EXC_BAD_ACCESS (SIGBUS)
Exception Subtype: unknown at 0x00000001007d4000
Triggered by Thread:  2

Thread 0 name:  Dispatch queue: com.apple.libdispatch-manager
Thread 0:
0   libsystem_kernel.dylib          0x0000000197d88c24 kevent64 + 8
1   libdispatch.dylib               0x0000000197c6de6c _dispatch_mgr_invoke + 272
2   libdispatch.dylib               0x0000000197c5f998 _dispatch_mgr_thread + 48

Thread 1 name:  Dispatch queue: com.apple.root.default-qos.overcommit
Thread 1:
0   libsystem_kernel.dylib          0x0000000197da3984 __sigsuspend_nocancel + 8
1   libdispatch.dylib               0x0000000197c6921c _dispatch_sigsuspend + 24
2   libdispatch.dylib               0x0000000197c69200 _dispatch_sig_thread + 44

Thread 2 name:  Dispatch queue: src
Thread 2 Crashed:
0   libsystem_platform.dylib        0x0000000197e35300 _platform_memmove + 176
1   libxpc.dylib                    0x0000000197e6567c xpc_data_create + 84
2   CoreFoundation                  0x0000000185d5a9b8 -[CFPDSource acceptMessage:] + 1956
3   CoreFoundation                  0x0000000185dc0da8 __handle_synchronize_message_block_invoke103 + 172
4   CoreFoundation                  0x0000000185d57c58 __88+[CFPDSource withSourceForDomain:inContainer:user:byHost:managed:synchronously:perform:]_block_invoke_2 + 24
5   CoreFoundation                  0x0000000185d5955c __25-[CFPDSource lockedSync:]_block_invoke + 44
6   libdispatch.dylib               0x0000000197c5d950 _dispatch_client_callout + 12
7   libdispatch.dylib               0x0000000197c671e0 _dispatch_barrier_sync_f_invoke + 72
8   CoreFoundation                  0x0000000185d59520 -[CFPDSource lockedSync:] + 80
9   CoreFoundation                  0x0000000185d57c0c __88+[CFPDSource withSourceForDomain:inContainer:user:byHost:managed:synchronously:perform:]_block_invoke + 504
10  libdispatch.dylib               0x0000000197c5d950 _dispatch_client_callout + 12
11  libdispatch.dylib               0x0000000197c671e0 _dispatch_barrier_sync_f_invoke + 72
12  CoreFoundation                  0x0000000185d576fc +[CFPDSource withSourceForDomain:inContainer:user:byHost:managed:synchronously:perform:] + 364
13  CoreFoundation                  0x0000000185dc0508 handle_message + 1312
14  CoreFoundation                  0x0000000185dc081c __handle_multi_message_block_invoke_2 + 124
15  libxpc.dylib                    0x0000000197e657c0 xpc_array_apply + 76
16  CoreFoundation                  0x0000000185dc05f8 handle_message + 1552
17  CoreFoundation                  0x0000000185dbffd4 ____CFXPreferencesDaemon_main_block_invoke_5 + 132
18  libxpc.dylib                    0x0000000197e64cc8 _xpc_connection_call_event_handler + 64
19  libxpc.dylib                    0x0000000197e62bcc _xpc_connection_mach_event + 2156
20  libdispatch.dylib               0x0000000197c5da24 _dispatch_client_callout4 + 12
21  libdispatch.dylib               0x0000000197c6113c _dispatch_mach_msg_invoke + 488
22  libdispatch.dylib               0x0000000197c682d0 _dispatch_queue_drain + 2004
23  libdispatch.dylib               0x0000000197c60664 _dispatch_mach_invoke + 132
24  libdispatch.dylib               0x0000000197c6a314 _dispatch_root_queue_drain + 716
25  libdispatch.dylib               0x0000000197c6bc48 _dispatch_worker_thread3 + 104
26  libsystem_pthread.dylib         0x0000000197e3d228 _pthread_wqthread + 812
27  libsystem_pthread.dylib         0x0000000197e3ceec start_wqthread + 0

Answer 1

此错误肯定是由于尝试访问kSecAttrAccessibleWhenUnlocked设备仍处于锁定状态时的项目而导致的.您可以通过查看您提供的日志的以下行来说明这一点:

securityd[32279] <Error>:  securityd_xpc_dictionary_handler Okta Verify[32480] copy_matching The operation couldn’t be completed. (OSStatus error -25308 - ks_crypt:     e00002e2 failed to unwrap item (class 6, bag: 0) Access to item attempted while keychain is locked.)

第6类是kSecAttrAccessibleWhenUnlocked(并且kSecAttrAccessibleAlways是第8类) - 有关详细信息,请参阅此套牌的幻灯片15 - 因此您所看到的行为是预期的.

现在真正的问题是为什么这个项目会kSecAttrAccessibleWhenUnlocked在你认为的时候结束kSecAttrAccessibleAlways.没有看到更多代码和/或有更多信息就很难分辨,但这里有几点需要考虑:

• 卸载应用程序时不会删除钥匙串项目 - 它们确实可以在重新安装/升级应用程序后继续使用.因此,如果该应用程序的早期版本创建了一个kSecAttrAccessibleWhenUnlocked可能刚刚进行的项目.尝试删除该项目并再次创建它(并检查返回值SecItemDelete()并SecItemAdd()确保已完成).
• kSecAttrAccessibleAlways传递给的双重检查,SecItemAdd()以便iOS不会自行应用任何默认值.
• 请注意,必须在创建项目(即to SecItemAdd())时传递辅助功能类,而不是在检索它时(即不是SecItemCopyMatching()).这有点显而易见,但重申一点也不痛.

如果以上都没有帮助,请发布相关代码,显示该项目的创建方式,以及如何阅读.