Android facebook-login library 11.2.0 crashes Android 12 - Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE #997

juliusspencer · 2021-09-07T02:54:39Z

Checklist before submitting a bug report

I've updated to the latest released version of the SDK
I've searched for existing Github issues
I've looked for existing answers on Stack Overflow, the Facebook Developer Community Forum and the Facebook Developers Group
I've read the Code of Conduct
This issue is not security related and can safely be disclosed publicly on GitHub

Java version

11.0.10+9

Android version

API 31, Android 12

Android SDK version

11.2.0

Installation platform & version

Gradle

Package

Login

Goals

Handling a callback in onActivityResult from a successful login.

override fun onActivityResult(requestCode: Int, resultCode: Int, data: Intent?) {
	super.onActivityResult(requestCode, resultCode, data)
	// Pass the activity result back to the Facebook SDK
	facebookCallbackManager.onActivityResult(requestCode, resultCode, data)
}

Expected results

Receive the response in a FacebookCallback.

              LoginManager.getInstance().registerCallback(
		facebookCallbackManager,
		object : FacebookCallback<LoginResult> {
			override fun onSuccess(loginResult: LoginResult) {
                                  // here
			}

			override fun onCancel() {
                                  // or here
			}

			override fun onError(error: FacebookException) {
                                  // or here
			}
		})

Actual results

Crash:

 Caused by: java.lang.IllegalArgumentException: my.app.id: Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE be specified when creating a PendingIntent.
 Strongly consider using FLAG_IMMUTABLE, only use FLAG_MUTABLE if some functionality depends on the PendingIntent being mutable, e.g. if it needs to be used with inline replies or bubbles.
    at android.app.PendingIntent.checkFlags(PendingIntent.java:375)
    at android.app.PendingIntent.getBroadcastAsUser(PendingIntent.java:645)
    at android.app.PendingIntent.getBroadcast(PendingIntent.java:632)
    at com.facebook.AccessTokenManager.setTokenExpirationBroadcastAlarm(AccessTokenManager.kt:121)
    at com.facebook.AccessTokenManager.setCurrentAccessToken(AccessTokenManager.kt:94)
    at com.facebook.AccessTokenManager.setCurrentAccessToken(AccessTokenManager.kt:47)
    at com.facebook.AccessToken$Companion.setCurrentAccessToken(AccessToken.kt:428)
    at com.facebook.AccessToken.setCurrentAccessToken(Unknown Source:2)
    at com.facebook.login.LoginManager.finishLogin(LoginManager.java:894)
    at com.facebook.login.LoginManager.onActivityResult(LoginManager.java:247)
    at com.facebook.login.LoginManager$1.onActivityResult(LoginManager.java:186)

Steps to reproduce

In your build.gradle target 31:

android {
    compileSdkVersion 31

    defaultConfig {
        applicationId "my.app.id"
        minSdkVersion 23
        targetSdkVersion 31

Perform a log in action:

	val loginManager = LoginManager.getInstance()
	loginManager.logInWithReadPermissions(this, listOf("email", "public_profile"))

Code samples & details

// onActivityResult
	override fun onActivityResult(requestCode: Int, resultCode: Int, data: Intent?) {
		super.onActivityResult(requestCode, resultCode, data)
		// Pass the activity result back to the Facebook SDK
		facebookCallbackManager.onActivityResult(requestCode, resultCode, data)
	}

// initialise callback

		facebookCallbackManager = CallbackManager.Factory.create()
		LoginManager.getInstance().registerCallback(
			facebookCallbackManager,
			object : FacebookCallback<LoginResult> {
				override fun onSuccess(loginResult: LoginResult) {
				}

				override fun onCancel() {
				}

				override fun onError(error: FacebookException) {
				}
			})

// perform sign in
				val loginManager = LoginManager.getInstance()
				loginManager.logInWithReadPermissions(this, listOf("email", "public_profile"))

The text was updated successfully, but these errors were encountered:

linmx0130 · 2021-09-07T23:29:34Z

Hi @juliusspencer, thanks for raising this issue! The fix is merged into the current main branch as 1b8c151. It will be released soon in Facebook Android SDK v11.3.0.

prateekcode · 2021-11-08T07:47:23Z

Can you please let me know when this release will be out? I'm still getting this issue.

hoangvuanhdevelopervn · 2021-11-15T02:24:49Z

Can you please let me know when this release will be out? I'm still getting this issue.

Me too, it's still erro

hoangvuanh761993 · 2021-11-15T03:08:56Z

It's still an error on Android 12

sobhanaKR · 2022-01-11T08:46:34Z

Is it fixed now ?

linmx0130 · 2022-01-12T04:23:54Z

Hi all! This problem should already be fixed in the latest Facebook Android SDK. If you still have the issue, could you share the crash tracelog and the SDK version you're using for us to determine the problem?

amsheerS · 2022-01-29T13:17:46Z

implementation 'com.facebook.android:facebook-android-sdk:12.3.0'

This one solved the issue.

heeveG · 2022-02-02T07:16:11Z

@linmx0130
Hi, app still crashes

Here is the tracelog:

Type
exception.class.missing._Unknown_

exception.class.missing._Unknown_: Strongly consider using FLAG_IMMUTABLE, only use FLAG_MUTABLE if some functionality depends on the PendingIntent being mutable, e.g. if it needs to be used with inline replies or bubbles.
  at android.app.PendingIntent.checkFlags (PendingIntent.java:382)
  at android.app.PendingIntent.getBroadcastAsUser (PendingIntent.java:673)
  at android.app.PendingIntent.getBroadcast (PendingIntent.java:660)
  at com.facebook.AccessTokenManager.setTokenExpirationBroadcastAlarm (AccessTokenManager.kt:121)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:94)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:47)
  at com.facebook.AccessTokenManager$refreshCurrentAccessTokenImpl$1.onBatchCompleted (AccessTokenManager.kt:256)
  at com.facebook.GraphRequest$Companion$runCallbacks$runnable$1.run (GraphRequest.kt:1033)
  at android.os.Handler.handleCallback (Handler.java:938)
  at android.os.Handler.dispatchMessage (Handler.java:99)
  at android.os.Looper.loopOnce (Looper.java:226)
  at android.os.Looper.loop (Looper.java:313)
  at android.app.ActivityThread.main (ActivityThread.java:8582)
  at java.lang.reflect.Method.invoke (Native Method)
  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run (RuntimeInit.java:563)
  at com.android.internal.os.ZygoteInit.main (ZygoteInit.java:1133)

We are using 12.2 SDK version

amsheerS · 2022-02-02T07:18:11Z

@linmx0130 Hi, app still crashes

Here is the tracelog:

Type
exception.class.missing._Unknown_

exception.class.missing._Unknown_: Strongly consider using FLAG_IMMUTABLE, only use FLAG_MUTABLE if some functionality depends on the PendingIntent being mutable, e.g. if it needs to be used with inline replies or bubbles.
  at android.app.PendingIntent.checkFlags (PendingIntent.java:382)
  at android.app.PendingIntent.getBroadcastAsUser (PendingIntent.java:673)
  at android.app.PendingIntent.getBroadcast (PendingIntent.java:660)
  at com.facebook.AccessTokenManager.setTokenExpirationBroadcastAlarm (AccessTokenManager.kt:121)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:94)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:47)
  at com.facebook.AccessTokenManager$refreshCurrentAccessTokenImpl$1.onBatchCompleted (AccessTokenManager.kt:256)
  at com.facebook.GraphRequest$Companion$runCallbacks$runnable$1.run (GraphRequest.kt:1033)
  at android.os.Handler.handleCallback (Handler.java:938)
  at android.os.Handler.dispatchMessage (Handler.java:99)
  at android.os.Looper.loopOnce (Looper.java:226)
  at android.os.Looper.loop (Looper.java:313)
  at android.app.ActivityThread.main (ActivityThread.java:8582)
  at java.lang.reflect.Method.invoke (Native Method)
  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run (RuntimeInit.java:563)
  at com.android.internal.os.ZygoteInit.main (ZygoteInit.java:1133)

We are using 12.2 SDK version

implementation 'com.facebook.android:facebook-android-sdk:12.3.0'

Please try this

heeveG · 2022-02-02T07:28:33Z

@linmx0130 Hi, app still crashes
Here is the tracelog:

Type
exception.class.missing._Unknown_

exception.class.missing._Unknown_: Strongly consider using FLAG_IMMUTABLE, only use FLAG_MUTABLE if some functionality depends on the PendingIntent being mutable, e.g. if it needs to be used with inline replies or bubbles.
  at android.app.PendingIntent.checkFlags (PendingIntent.java:382)
  at android.app.PendingIntent.getBroadcastAsUser (PendingIntent.java:673)
  at android.app.PendingIntent.getBroadcast (PendingIntent.java:660)
  at com.facebook.AccessTokenManager.setTokenExpirationBroadcastAlarm (AccessTokenManager.kt:121)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:94)
  at com.facebook.AccessTokenManager.setCurrentAccessToken (AccessTokenManager.kt:47)
  at com.facebook.AccessTokenManager$refreshCurrentAccessTokenImpl$1.onBatchCompleted (AccessTokenManager.kt:256)
  at com.facebook.GraphRequest$Companion$runCallbacks$runnable$1.run (GraphRequest.kt:1033)
  at android.os.Handler.handleCallback (Handler.java:938)
  at android.os.Handler.dispatchMessage (Handler.java:99)
  at android.os.Looper.loopOnce (Looper.java:226)
  at android.os.Looper.loop (Looper.java:313)
  at android.app.ActivityThread.main (ActivityThread.java:8582)
  at java.lang.reflect.Method.invoke (Native Method)
  at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run (RuntimeInit.java:563)
  at com.android.internal.os.ZygoteInit.main (ZygoteInit.java:1133)

We are using 12.2 SDK version

implementation 'com.facebook.android:facebook-android-sdk:12.3.0'

Please try this

Thanks for your reply!
Are you sure the issue was attempted to be fixed exactly in 12.3.0 and not before (we use the previous version 12.2.0)? As I see from the commit history, Fix PendingIntent vulnerability commit was made on 7 Aug 2021.

Just making sure, because the update process on our project takes quite a while.

linmx0130 · 2022-02-02T19:34:26Z

Hi @heeveG! Please double confirm that you're using the latest SDK.
According to your tracelog, the crash happens at AccessTokenManager.kt:121. However, Fix PendingIntent vulnerability commit modify the pending intent creation calls, so the call should happens at line 123 or line 125.

As your tracelog shows, the SDK creates the pending intent at line 121, which means that it doesn't adopt the patch.

ShahrukhBT · 2023-03-10T05:05:47Z

Is there any another way to implement the facebook login natively in both android(Xamarin) and ios(Xamarin)?

linmx0130 closed this as completed Sep 7, 2021

Willham12 mentioned this issue Oct 2, 2021

Android 12 issue thebergamo/react-native-fbsdk-next#109

Closed

mos379 mentioned this issue Apr 27, 2022

Crash on Android 12 xamarin/FacebookComponents#236

Open

mikehardy mentioned this issue Apr 27, 2022

Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE be specified when creating a PendingIntent. thebergamo/react-native-fbsdk-next#235

Closed

2ez4tt mentioned this issue Jan 9, 2023

App crashes after clicking on Login with Facebook live app (app is live on google store) coolishbee/universal-sdk-unity#13

Closed

UCIS mentioned this issue Oct 5, 2023

Update to Facebook SDK 11.3.0 for Android xamarin/FacebookComponents#262

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Android facebook-login library 11.2.0 crashes Android 12 - Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE #997

Android facebook-login library 11.2.0 crashes Android 12 - Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE #997

juliusspencer commented Sep 7, 2021

linmx0130 commented Sep 7, 2021

prateekcode commented Nov 8, 2021

hoangvuanhdevelopervn commented Nov 15, 2021

hoangvuanh761993 commented Nov 15, 2021

sobhanaKR commented Jan 11, 2022

linmx0130 commented Jan 12, 2022

amsheerS commented Jan 29, 2022

heeveG commented Feb 2, 2022

amsheerS commented Feb 2, 2022

heeveG commented Feb 2, 2022 •

edited

Loading

linmx0130 commented Feb 2, 2022

ShahrukhBT commented Mar 10, 2023 •

edited

Loading

Android facebook-login library 11.2.0 crashes Android 12 - Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE #997

Android facebook-login library 11.2.0 crashes Android 12 - Targeting S+ (version 31 and above) requires that one of FLAG_IMMUTABLE or FLAG_MUTABLE #997

Comments

juliusspencer commented Sep 7, 2021

Checklist before submitting a bug report

Java version

Android version

Android SDK version

Installation platform & version

Package

Goals

Expected results

Actual results

Steps to reproduce

Code samples & details

linmx0130 commented Sep 7, 2021

prateekcode commented Nov 8, 2021

hoangvuanhdevelopervn commented Nov 15, 2021

hoangvuanh761993 commented Nov 15, 2021

sobhanaKR commented Jan 11, 2022

linmx0130 commented Jan 12, 2022

amsheerS commented Jan 29, 2022

heeveG commented Feb 2, 2022

amsheerS commented Feb 2, 2022

heeveG commented Feb 2, 2022 • edited Loading

linmx0130 commented Feb 2, 2022

ShahrukhBT commented Mar 10, 2023 • edited Loading

heeveG commented Feb 2, 2022 •

edited

Loading

ShahrukhBT commented Mar 10, 2023 •

edited

Loading