194653 - information leak in download manager when switching profiles

Status: RESOLVED WORKSFORME

(SeaMonkey :: Download & File Handling, defect)

Description

[Bjarne D Mathiesen]

User-Agent:       Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; da-DK; rv:1.3b; MultiZilla v1.1.34 (d)) Gecko/20030221
Build Identifier: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; da-DK; rv:1.3b; MultiZilla v1.1.34 (d)) Gecko/20030221

When using menu:Tools->Switch Profile... to switch to another profile, the
download manager remembers all of the downloads from the provious profile.

Reproducible: Always

Steps to Reproduce:
1. open the download manager
2. use menu:Tools->Switch Profile... to switch to another profile
3. open the download manager

Actual Results:  
The download manager has remembered all of the downloads done in the previous
profile.

Expected Results:  
The download manager ought to have been updated with downloads.rdf in the
switched to profile

It's privacy/security issue as unwanted information is passed between two profiles

Comment 1

[Bjarne D Mathiesen]

this is also a problem with the search sidebar.

Steps to reproduce
0) display the sidebar
1) do a google-search
2) use "menu:Tools->Switch Profile..." to switch to another profile
3) notice that the search results from the former profile are displayed in the
sidebar

Expected Results:
A blank search sidebar

changing summary to a more general one

Comment 2

[:aceman]

Reporter: could you confirm this is a symptom of bug 205821?

Comment 3

[Bjarne D Mathiesen]

It sure seems to be an instance of bug 205821.

Note: I'm not advance enough to know how to observe which files Mozilla
opens/closes, so my confimation is based upon deductive logic. ;-)

adding platform all based upon description in bug 205821
setting this to block bug 205821 making bug 205821 a meta-bug as suggested

Comment 4

[:aceman]

There are programs for observing open files. I used TaskInfo 2003.

You haven't closed this bug yet, does it mean it is still there in 1.5?
I feel there was some progress on this between 1.3 and 1.5, some files are now 
properly closed. Have you checked that download manager data is still leaking 
across profiles?

Comment 5

[Bjarne D Mathiesen]

TaskInfo 2003 : that's a WinTel program ;; I'm on a Mac (FreeBSD / Darwin)

The bug is still present in Moz 1.5final Gecko/20031007

Comment 6

[:aceman]

Thanks for confirmation. Could you change your summary to mention only the 
download information? I will move the general description of "information leak" 
to the meta bug.

Sorry, I didn't notice your Hardware selection :) In Linux there is a utility 
called 'lsof' (=list open files), maybe it is available for Mac OS 
X/Darwin/FreeBSD too. Or something similar.

Comment 7

[Bjarne D Mathiesen]

1) changing summary per request
2) moving search sidebar information leak to new bug
3) lsof *is* available on Mac OS X ;; will have to look into it when time allows

confirmed using :
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.5; MultiZilla
v1.5.0.3g) Gecko/20031007

Comment 8

[Wayne Mery (:wsmwk)]

can you reproduce?

Comment 9

[Hartmut Figge]

(In reply to comment #8)
> can you reproduce?

Not with my SN2 nightly.

Comment 10

[Wayne Mery (:wsmwk)]

=> WFM then.  Thanks Hartmut :)