10.0.1 java.lang.VerifyError: Verifier rejected class com.stripe.android.stripe3ds2.a.h

[alaffray]

Summary

I updated the Stripe sdk from 10.0.0 to 10.0.1 and the stripe SDK crash while trying to verify the SecretKey

Code to reproduce

Android version

Only tested on Android 9 , API 28

Impacted devices

Only tested on a Google Pixel 2

Installation method

Gradle

SDK version

10.0.1

Other information

java.lang.VerifyError: Verifier rejected class com.stripe.android.stripe3ds2.a.h: org.json.JSONObject com.stripe.android.stripe3ds2.a.h.a(java.lang.String, javax.crypto.SecretKey) failed to verify: org.json.JSONObject com.stripe.android.stripe3ds2.a.h.a(java.lang.String, javax.crypto.SecretKey): [0x37] cannot access instance field boolean com.stripe.android.stripe3ds2.a.h.a from object of type Reference: org.json.JSONObject (declaration of 'com.stripe.android.stripe3ds2.a.h' appears in /data/app/com.your.app-yourkey==/split_lib_dependencies_apk.apk!classes2.dex)
        at com.stripe.android.stripe3ds2.transaction.w.a(Unknown Source:26)
        at com.stripe.android.stripe3ds2.service.StripeThreeDs2ServiceImpl.createTransaction(Unknown Source:46)
        at com.stripe.android.PaymentController.begin3ds2Auth(PaymentController.java:322)
        at com.stripe.android.PaymentController.handleNextAction(PaymentController.java:245)
        at com.stripe.android.PaymentController$ConfirmStripeIntentCallback.onSuccess(PaymentController.java:458)
        at com.stripe.android.PaymentController$ConfirmStripeIntentCallback.onSuccess(PaymentController.java:436)
        at com.stripe.android.ApiOperation.onPostExecute(ApiOperation.java:32)
        at com.stripe.android.ApiOperation.onPostExecute(ApiOperation.java:11)
        at android.os.AsyncTask.finish(AsyncTask.java:695)
        at android.os.AsyncTask.access$600(AsyncTask.java:180)
        at android.os.AsyncTask$InternalHandler.handleMessage(AsyncTask.java:712)
        at android.os.Handler.dispatchMessage(Handler.java:106)
        at android.os.Looper.loop(Looper.java:193)
        at android.app.ActivityThread.main(ActivityThread.java:6718)
        at java.lang.reflect.Method.invoke(Native Method)
        at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493)
        at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)

[mshafrir-stripe]

@alaffray thanks for reporting this issue, I’ll investigate it this morning. Can you also send me an email to my Github username with the -stripe part replaced with “at stripe dot com”? I could use your help debugging the issue and I also have some other questions.

[madsager]

The R8 team is looking into this issue at https://issuetracker.google.com/issues/138337238

@alaffray would it be possible for you to share the APK either on the bug report above or privately by email? Alternatively, can you provide us with more information about your build setup. Which version of Android Studio and the Android Gradle Plugin are you using. Are you using shrinking? In that case are you using Proguard or R8?

The library code in that version looks OK and therefore it seems like we are hitting a bug in the build of the app using the library. We would love to be able to reproduce so we can track it down. Any information you can provide will help us do so.

Thanks!
Mads