1299170 - Malicious sample file is not blocked by Firefox

Status: RESOLVED WORKSFORME

(Firefox :: Downloads Panel, defect)

Description

[Bogdan Maris [:bogdan_maris], Release Desktop QA]

[Affected versions]:
- Firefox 49 beta 8
- Firefox 48.0.2

[Unaffected versions]:
- Latest Nightly 51.0a1
- Latest Aurora 50.0a2

[Affected platforms]:
- Windows XP

[Unaffected platforms]:
- Mac OS X 10.10.5
- Ubuntu 14.04 x86
- Windows 7 x64

[Steps to reproduce]:
1. Start Firefox
2. Visit about:preferences#security
3. Uncheck 'Warn me about unwanted and uncommon software
4. Visit http://testsafebrowsing.appspot.com/
5. From "Desktop Download Warnings" click on link from 1.

[Expected result]:
- File is not downloaded and blocker icon is displayed.

[Actual result]:
- File is downloaded without blocking it.

[Regression range]:
- We will check for a regression ASAP.

Comment 1

[:Paolo Amadini]

Did you try this on a new profile, and if so, did you wait enough time for the malware list to be updated in the background? If this test is done on a new profile, it may fail because the list hasn't been downloaded yet, independently from the preference value. So, you should cross-check that the file has been blocked at least once in the profile before, before switching the preference.

Comment 2

[Florin Mezei, QA (:FlorinMezei)]

Adding a needinfo for Bogdan to follow up on this.

Comment 3

[Bogdan Maris [:bogdan_maris], Release Desktop QA]

(In reply to :Paolo Amadini from comment #1)
> Did you try this on a new profile, and if so, did you wait enough time for
> the malware list to be updated in the background? If this test is done on a
> new profile, it may fail because the list hasn't been downloaded yet,
> independently from the preference value. So, you should cross-check that the
> file has been blocked at least once in the profile before, before switching
> the preference.

Indeed, I used a new profile. On the profile before switching the preference, the file has been blocked. On this same profile, I switched the preference, waited for about 5 minutes and then restarted the browser,  the file was blocked again. 

Then I started a new profile, and switched the preference. After waiting 5 minutes, the file was correctly blocked.
Considering the information above, the issue does no longer reproduce.