Acknowledged
3 months ago

CIQ store app (iOS) falsely shows settings from *wrong app*, when two apps are installed with similar settings definitions

Connect IQ Store app version 2.30.1 (iOS)

I have a data field app that has 4 "clones" in the store. They're all basically identical except for their app UUID, app name, and certain default settings.

AppBuilder 5: https://apps.garmin.com/apps/fd690281-9c22-4fee-a81e-3b7f39aa67c5

AppBuilder 5 (B): https://apps.garmin.com/apps/706e91ae-7b84-4ac3-b0a7-dc2bcceb6fc2

AppBuilder 5 (C): https://apps.garmin.com/apps/f5259a68-1509-4ee9-9a05-46dc1d939f3f

AppBuilder 5 (D): https://apps.garmin.com/apps/394b4149-6d5a-4c2c-836d-dca71ea10b98

I had AppBuilder 5 installed on my 955, but none of the other clones were installed, and I had made extensive changes to the settings of AppBuilder 5. Subsequently, I installed AppBuilder 5 (B). When I opened AppBuilder 5 (B)'s settings in the CIQ app, it showed me settings values for AppBuilder 5, instead of 5 (B)'s defaults!

But when I added AppBuilder 5 (B) to an activity, it was clearly using its default settings values (one of the settings controls the data field label.)

Reproduction Procedure:

- If any of the AppBuilder 5 data fields are installed on your device, uninstall them

- Install AppBuilder 5 and open its settings in the CIQ store app (iOS)

- Note that the default value for "Profile 1 - Label" is "AppBuilder".  (The default values for the other apps are "AppBuilderB", "AppBuilderC", and "AppBuilderD")

- Change "Profile 1 - Label" to "Custom Label" and save settings

- Add AppBuilder 5 to an activity and note that the displayed label is "Custom Label"

- Install AppBuilder 5 (B). (Do not modify its settings or launch the app on the watch)

- Install an unrelated app, such as HM's DIY #1

- Open HM's DIY #1's settings. Exit without saving

- Open AppBuilder 5 (B)'s settings: note that the value for "Profile 1 - Label" is correctly displayed as "AppBuilderB". Exit settings without saving

- Open AppBuilder 5's settings. Exit without saving

- Open AppBuilder 5 (B)'s settings: note that the value for "Profile 1 - Label" incorrectly appears to be "Custom Label". Exit settings without saving

- Add AppBuilder 5 (B) to an activity and note that the displayed label is "AppBuilderB"

- Open AppBuilder 5's settings. Exit without saving

- Open AppBuilder 5 (B)'s settings. Note that the value for "Profile 1 - Label" is now correctly displayed as "AppBuilderB"

The same problem can be demonstrated with any of the 4 clones.

EDIT: as mentioned in a comment below, I think this is a potential security issue.

EDIT2: Simplified recreation procedure:

- install an app (B) with settings but do not modify settings or launch the app on the device. (App B's settings are uninitialized.)

- install a related clone app (A) with similar settings to B. Modify settings so that they're recognizable

- Install an unrelated app (C) with dissimilar settings to B

- Open C's settings, then open B's settings. B's settings will show B's default values as expected. (Do not save B's settings at this point)

- Open A's settings, then open B's settings: you will see A's settings instead of B's default values

FlowState
Parents
  • 3 months ago

    I can make a video which shows that different settings are shown for the new app depending on which app's settings were open immediately prior to opening the new app's settings. I'm not going to show the process of installing the app though (you'll have to take my word for it that I just installed the app and didn't save any settings or launch it on the watch.)

    Hopefully this will be enough anecdotal evidence for most ppl.

    In this video:

    - AppBuilder 5 = existing app with modified settings ("Profile 1 - Label" = "DISTINCTIVE SETTINGS FOR EXISTING APP")

    - AppBuilder 5 (B) = newly installed app ("Profile 1 - Label" default value should be "AppBuilderB")

    - HMs DIY #1 = completely unrelated app (but still has settings)

    The video shows:

    - Opening settings for HMs DIY #1

    - Opening settings for AppBuilder 5 (B) (newly installed) - default settings are visible as expected. (Closing settings without saving)

    - Opening settings for AppBuilder 5 (previously installed, settings changed)

    - Opening settings for AppBuilder 5 (B) - settings for AppBuilder 5 are incorrectly shown

Comment
  • 3 months ago

    I can make a video which shows that different settings are shown for the new app depending on which app's settings were open immediately prior to opening the new app's settings. I'm not going to show the process of installing the app though (you'll have to take my word for it that I just installed the app and didn't save any settings or launch it on the watch.)

    Hopefully this will be enough anecdotal evidence for most ppl.

    In this video:

    - AppBuilder 5 = existing app with modified settings ("Profile 1 - Label" = "DISTINCTIVE SETTINGS FOR EXISTING APP")

    - AppBuilder 5 (B) = newly installed app ("Profile 1 - Label" default value should be "AppBuilderB")

    - HMs DIY #1 = completely unrelated app (but still has settings)

    The video shows:

    - Opening settings for HMs DIY #1

    - Opening settings for AppBuilder 5 (B) (newly installed) - default settings are visible as expected. (Closing settings without saving)

    - Opening settings for AppBuilder 5 (previously installed, settings changed)

    - Opening settings for AppBuilder 5 (B) - settings for AppBuilder 5 are incorrectly shown

Children
No Data