[PM-41690] fix: CXF import crash on negative timestamps

crates/bitwarden-exporters/src/cxf/import.rs

@@ -29,13 +29,41 @@ use crate::{
  * Parse CXF payload in the format compatible with Apple (At the Account-level)
  */
 pub(crate) fn parse_cxf(payload: String) -> Result<Vec<ImportingCipher>, CxfError> {
-    let account: CxfAccount = serde_json::from_str(&payload)?;
+    let sanitized = sanitize_timestamps(&payload);
+    let account: CxfAccount = serde_json::from_str(&sanitized)?;
 
     let items: Vec<ImportingCipher> = account.items.into_iter().flat_map(parse_item).collect();
 
     Ok(items)
 }
 
+/// Replace negative `creationAt` and `modifiedAt` values with 0.
+///
+/// Some credential managers (e.g., Google Password Manager) export timestamps
+/// as the Windows FILETIME epoch (-11644473600) when no real date exists. The
+/// `credential-exchange-format` crate deserializes these fields as `u64` and
+/// cannot handle negative values.
+pub(crate) fn sanitize_timestamps(payload: &str) -> String {
+    let mut value: serde_json::Value = match serde_json::from_str(payload) {
+        Ok(v) => v,
+        Err(_) => return payload.to_string(),
+    };
+
+    if let Some(items) = value.get_mut("items").and_then(|v| v.as_array_mut()) {
+        for item in items {
+            for key in &["creationAt", "modifiedAt"] {
+                if let Some(n) = item.get(key).and_then(|v| v.as_i64()) {
+                    if n < 0 {
+                        item[key] = serde_json::Value::Number(0.into());
+                    }
+                }
+            }
+        }
+    }
+
+    serde_json::to_string(&value).unwrap_or_else(|_| payload.to_string())
+}
+
 /// Convert a CXF timestamp to a [`DateTime<Utc>`].
 ///
 /// If the timestamp is None, the current time is used.

crates/bitwarden-exporters/src/cxf/tests/mod.rs

@@ -1,3 +1,4 @@
 mod dashlane_import_test;
+mod negative_timestamp_test;
 mod one_password_import_test;
 mod sample_import_test;

crates/bitwarden-exporters/src/cxf/tests/negative_timestamp_test.rs

@@ -0,0 +1,74 @@
+//! Tests for handling negative timestamps in CXF import.
+//!
+//! Some credential managers (e.g., Google Password Manager) export timestamps
+//! as the Windows FILETIME epoch (-11644473600) when no real date exists.
+
+#[cfg(test)]
+mod tests {
+    use crate::cxf::import::{parse_cxf, sanitize_timestamps};
+
+    #[test]
+    fn test_sanitize_negative_creation_at() {
+        let input = r#"{"id":"test","items":[{"id":"1","creationAt":-11644473600,"modifiedAt":1759783057,"title":"Test","credentials":[]}]}"#;
+        let result = sanitize_timestamps(input);
+        assert!(result.contains(r#""creationAt":0"#));
+        assert!(result.contains(r#""modifiedAt":1759783057"#));
+    }
+
+    #[test]
+    fn test_sanitize_negative_modified_at() {
+        let input = r#"{"id":"test","items":[{"id":"1","creationAt":1759783057,"modifiedAt":-11644473600,"title":"Test","credentials":[]}]}"#;
+        let result = sanitize_timestamps(input);
+        assert!(result.contains(r#""creationAt":1759783057"#));
+        assert!(result.contains(r#""modifiedAt":0"#));
+    }
+
+    #[test]
+    fn test_sanitize_both_negative() {
+        let input = r#"{"id":"test","items":[{"id":"1","creationAt":-11644473600,"modifiedAt":-11644473600,"title":"Test","credentials":[]}]}"#;
+        let result = sanitize_timestamps(input);
+        assert!(result.contains(r#""creationAt":0"#));
+        assert!(result.contains(r#""modifiedAt":0"#));
+    }
+
+    #[test]
+    fn test_sanitize_valid_timestamps_unchanged() {
+        let input = r#"{"id":"test","items":[{"id":"1","creationAt":1759783057,"modifiedAt":1759783057,"title":"Test","credentials":[]}]}"#;
+        let result = sanitize_timestamps(input);
+        assert!(result.contains(r#""creationAt":1759783057"#));
+        assert!(result.contains(r#""modifiedAt":1759783057"#));
+    }
+
+    #[test]
+    fn test_parse_cxf_with_negative_timestamps_does_not_error() {
+        let input = r#"{
+            "id": "DZSXp7iBQY-Fg-OofakQtQ",
+            "username": "user@example.com",
+            "email": "user@example.com",
+            "fullName": "Test User",
+            "collections": [],
+            "items": [{
+                "id": "9OF-QjVDQo2Wp2xWPw6ZhA",
+                "creationAt": -11644473600,
+                "modifiedAt": -11644473600,
+                "title": "Test Entry",
+                "credentials": [{
+                    "type": "basic-auth",
+                    "username": {
+                        "id": "-eZX0Gw-TzOsBFwt67N7ZA",
+                        "fieldType": "string",
+                        "value": "testuser"
+                    },
+                    "password": {
+                        "id": "wgu3wTcXSYawrGMWMtaANg",
+                        "fieldType": "concealed-string",
+                        "value": "testpass"
+                    },
+                    "urls": ["https://example.com"]
+                }]
+            }]
+        }"#;
+        let result = parse_cxf(input.to_string());
+        assert!(result.is_ok(), "parse_cxf should not error on negative timestamps: {:?}", result.err());
+    }
+}