1407766 - Nightly 58 displays blank pages in the browser after Symantec Endpoint is installed

Status: VERIFIED FIXED

(Core :: Security: Process Sandboxing, defect, P1)

Description

[Nils]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20171009192146

Steps to reproduce:

After installing Symantec Endpoint Protection on Windows 10, browser only displays blank pages in tabs. Local start page will not load. Dev Edition in the 57 branch appears to be unaffected by this.


Actual results:

Nothing displays within the browser, only white blank space.


Expected results:

Load pages normally.

Comment 1

[Alex Gaynor [:Alex_Gaynor]]

Can you set the |security.sandbox.content.level| preference to 3, restart the browser, and let us know if this still happens? (The default value is 4 on nightly)

Comment 2

[Nils]

about:config page will not load to allow me to make any changes.

Comment 3

[Alex Gaynor [:Alex_Gaynor]]

Ouch. Ok, let's try this a different way, can you try starting firefox with the environment variable |MOZ_DISABLE_CONTENT_SANDBOX| set to 1?

Comment 4

[Igor M.]

Same situation here. MOZ_DISABLE_CONTENT_SANDBOX=1 allows me to run nightly. 
Then I changed security.sandbox.content.level to 3, restarted nightly (without setting MOZ_DISABLE_CONTENT_SANDBOX to 1) and same problem appears (all pages are blank).

Nightly version: 58.0a1 (2017-10-11) (64-bit)
Built from https://hg.mozilla.org/mozilla-central/rev/20d9ad08dd36fe5230ad0ccf6cb3e4865d7851cf

Comment 5

[Jim Mathies [:jimm]]

Hey tracy, there's a trial of this av [1], would you please attempt to reproduce, and if so, find a regression range in 58.

[1] https://www.symantec.com/products/endpoint-protection

Comment 6

[Jim Mathies [:jimm]]

I wonder if this is a regression from bug 1406068. Can someone who can reproduce try a nightly build prior to 10-10?

Comment 7

[Jim Mathies [:jimm]]

nightly for testing: 
http://ftp.mozilla.org/pub/firefox/nightly/2017/10/2017-10-09-10-01-34-mozilla-central/

Comment 8

[Jim Mathies [:jimm]]

Attachment: patch

Lets pull these just to be safe.

Comment 9

[Raghu R]

I have the same problem and reverted to 2017-09-09. Cannot reproduce on 2017-09-09 build.
Also https://bugzilla.mozilla.org/show_bug.cgi?id=1403912 seems the same issue but for a different AV product?

Comment 10

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/381e276f3534
Remove symantec dlls from the content process dll blocklist due to process startup issues associated with symantec av products. r=bobowen

Comment 11

[Nils]

(In reply to Igor M. from comment #4)
> Same situation here. MOZ_DISABLE_CONTENT_SANDBOX=1 allows me to run nightly. 
> Then I changed security.sandbox.content.level to 3, restarted nightly
> (without setting MOZ_DISABLE_CONTENT_SANDBOX to 1) and same problem appears
> (all pages are blank).
> 
> Nightly version: 58.0a1 (2017-10-11) (64-bit)
> Built from
> https://hg.mozilla.org/mozilla-central/rev/
> 20d9ad08dd36fe5230ad0ccf6cb3e4865d7851cf

This is the same result that I saw with yesterday's build (2017-10-11).

Comment 12

[Igor M.]

Version 57a1 from 09-09 works fine. Same with version linked in Comment 7 (no problems).

However, current nightly still has empty pages. 

security.sandbox.content.level 3 or 4 did not make any difference in all cases above.

Comment 13

[Nils]

Just updated to the 2017-10-12 build, and the issue is still occurring.

Comment 14

[Bob Owen (:bobowen)]

Nils, Igor - thanks for checking, but this is still on mozilla-inbound, it should get merged to mozilla-central soon and then the next Nightly created after that will contain it.

Comment 15

[Sebastian Hengst [:aryx] (needinfo me if it's about an intermittent or backout)]

https://hg.mozilla.org/mozilla-central/rev/381e276f3534

Comment 17

[Bob Owen (:bobowen)]

Nils, Igor - this change is now in the latest Nightly, it would be great if you would confirm that it fixes this issue.

Comment 18

[Nils]

Yes, this does fix the issue as I'm posting this via Nightly right now, build 2017-10-15.

Thanks everyone!

Comment 19

[Igor M.]

Same here. Works well on the build 2017-10-15.

Comment 20

[Bob Owen (:bobowen)]

Thanks both.