Closed Bug 1119941 Opened 10 years ago Closed 10 years ago

Test: disable Flash protected mode


(Core Graveyard :: Plug-ins, defect)

Windows 7
Not set


(firefox36 fixed, firefox37 fixed, firefox38 fixed)

Tracking Status
firefox36 --- fixed
firefox37 --- fixed
firefox38 --- fixed


(Reporter: benjamin, Assigned: benjamin)




(1 file)

The results of bug 1111791 indicate that Flash protected mode doubles or more the rate of Flash crashes and hangs for Firefox users. In order to validate that experiment against a larger audience and also get better crash-stats, we intend to disable protected mode by default up to beta.

Flash problems are one of the major reasons people are stopping using Firefox. This change is definitely trading off security for better functionality, which is a tough call, but it's something we're going to try on beta.

No decision has been made yet about rolling this out to release users.
Attached patch bug1119941.diffSplinter Review
Attachment #8546843 - Flags: review?(johnath)
Depends on: 1112709
Comment on attachment 8546843 [details] [diff] [review]

Approval Request Comment for Firefox 36
[Risks and why]: Protected mode reduces the impact of other security exploits, but appears to cause a significant increase in crashes and hangs as well as general browser jank. This is a significant change that will require careful evaluation after it has been deployed to the beta audience.
Attachment #8546843 - Flags: approval-mozilla-aurora?
Comment on attachment 8546843 [details] [diff] [review]

I'm marking this r+ based exclusively on the context I have, which is that Benjamin wants it clear that I agree to this test on beta, since there is an explicit trade-off between security and stability at play. I do agree to that on beta for the purposes of understanding how much this stability issue impacts our broader user base, however:

* I have not reviewed the code that uses this pref
* I have not tested this change
* I am explicitly *not* supporting this in release, at least not yet. This patch doesn't have a kill switch in it for exiting beta, but I trust Benjamin to be watching closely and to avoid accidental migration to release.
Attachment #8546843 - Flags: review?(johnath) → review+
Comment on attachment 8546843 [details] [diff] [review]

[Triage Comment]
after the merge day
Attachment #8546843 - Flags: approval-mozilla-beta+
Attachment #8546843 - Flags: approval-mozilla-aurora?
Attachment #8546843 - Flags: approval-mozilla-aurora+

Sylvestre, should we file a separate bug to track that we still need to make a decision about this for FF36?
Flags: needinfo?(sledru)
Target Milestone: --- → mozilla38
(In reply to Benjamin Smedberg  [:bsmedberg] from comment #5)
> Sylvestre, should we file a separate bug to track that we still need to make
> a decision about this for FF36?
I would prefer that yes. Thanks
Flags: needinfo?(sledru)
Depends on: 1120747
Depends on: 1120993
We're going to back this out at least for 36b1. Sylvestre says this should be backed out of the beta branch and GECKO360b1_2015011222_RELBRANCH.
See Also: → 1123245
Comment on attachment 8546843 [details] [diff] [review]

We've decided to deploy this along with bug 1125891 in beta 5, as a test, which will be backed out in beta 9 and will not ride to 36 release.
Attachment #8546843 - Flags: approval-mozilla-beta+ → approval-mozilla-beta?
Attachment #8546843 - Flags: approval-mozilla-beta? → approval-mozilla-beta+
Exploratory testing was performed today to check Flash player compatibility, using Firefox 36 Beta 5 (BuildID=20150129200438), on: Windows Vista x86, Windows 7 x64, Ubuntu 14.04 x64, and Mac OS X 10.9.5. Testing revealed only one new issue, filed in bug 1127884 (not sure if in any way related to this).

Detailed test results are in:
Depends on: 1131345
To close the bugzilla loops, we disabled this on all channels in bug 1120993.
Resolution: FIXED → WONTFIX
Product: Core → Core Graveyard
You need to log in before you can comment on or make changes to this bug.