430964 - some downloads with a long URL are policy-blocked

Status: VERIFIED DUPLICATE of bug 430566

(Toolkit :: Downloads API, defect)

Description

[Nickolay_Ponomarev]

Try clicking this http://mozilla.doslash.org/stuff/07065%20%d2%f0%e5%e1%ee%e2%e0%ed%e8%ea%20%ef%ee%e4%f1%e8%f1%f2%e5%ec%e5%20%f0%f3%f7%ed%ee%e3%ee%20%e2%e2%ee%e4%e0%20%ec%e5%f2%f0%e8%ea%20V09_.doc and downloading it.

I get a "This download has been blocked by your Security Zone Policy".

Under the hood in nsDownloadScanner::CheckPolicy IAttachmentExecute::SetLocalPath("file:///C:/Users/Nickolay/Downloads/07065%20%D0%A2%D1%80%D0%B5%D0%B1%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%BA%20%D0%BF%D0%BE%D0%B4%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B5%20%D1%80%D1%83%D1%87%D0%BD%D0%BE%D0%B3%D0%BE%20%D0%B2%D0%B2%D0%BE%D0%B4%D0%B0%20%D0%BC%D0%B5%D1%82%D1%80%D0%B8%D0%BA%20V09_.doc") fails with E_INVALIDARG, so does CheckPolicy(), so the download is blocked.

This is wrong, there's no reason I shouldn't be able to download this file. IE downloads it fine.

Right now I'm on Vista (Russian, Home Premium), but this was also reproduced on XP (don't remember if it had SP2). Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9pre) Gecko/2008042606 Minefield/3.0pre

Asking for blocking: it stops me from being able to do my job in Firefox (I see this a couple of times a week downloading attachments from gmail).

Comment 1

[Jim Jeffery not reading bug-mail 1/2/11]

I get the same on an US version of Vista HP SP1 (english)

Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9pre) Gecko/2008042606 Minefield/3.0pre Firefox/3.0 ID:2008042606

Comment 2

[Jim Jeffery not reading bug-mail 1/2/11]

I think I saw a bug in past couple days in reference to long file names triggering the security alert.  If I rename the long name above to test.doc the 0 byte file will download. 

Comment 3

[Jim Jeffery not reading bug-mail 1/2/11]

Dupe of https://bugzilla.mozilla.org/show_bug.cgi?id=430849 ?

Comment 4

[Kai Liu]

Yep, shortening the name eliminates the error, so this is probably a dupe of bug 430566 (to which 430849 was duped)...

Comment 5

[Nickolay_Ponomarev]

Hm, my bugzilla searching skills have faded after I didn't use it for a while :)

Thanks guys.

Comment 6

[Stephen Donner [:stephend] Not actively reading bugmail]

Verified dup

Comment 7

[VanillaMozilla]

How can this be a dupe of 430566?  That bug is about saving Web pages.  This is about downloading a FILE.

Comment 8

[VanillaMozilla]

On second thought, maybe this particular instance is about the long name after all.  But there are many reports of problems with exactly that error message.

See http://forums.mozillazine.org/viewtopic.php?f=38&t=673575 for a start.  There are many links within that post.  Judging from user queries it's a major problem.  I'm not sure it's just a Vista problem.

Comment 9

[Kai Liu]

(In reply to comment #8)
> On second thought, maybe this particular instance is about the long name after
> all.  But there are many reports of problems with exactly that error message.
>
Yes, this is a very general error message.

> See http://forums.mozillazine.org/viewtopic.php?f=38&t=673575 for a start. 
> There are many links within that post.  Judging from user queries it's a major
> problem.  I'm not sure it's just a Vista problem.
> 
The issues in that thread are separate, different issues and are not related in any way to this bug.  Mitigation for those other issues may be found in bug 425946.

Comment 10

[VanillaMozilla]

(In reply to comment #9)
> Mitigation for those other issues may be found in bug
> 425946.

OK, per bug 425946, comment 10, it looks like primarily due to a Windows bug.  That's believable, but for now, though, I don't see any clear documentation on a workaround.  If you look at http://kb.mozillazine.org/Unable_to_save_or_download_files#Reset_system_Internet_security_settings_-_Windows it's quite a mess, and I'm not sure SUMO is any better.  (I can't tell for sure, since it's currently difficult or impossible to browse SUMO articles--another bug?)  I have to wonder about vague references to maybe having to install IE7, etc.  This shouldn't happen unless there's another bug.  Does another bug need to be filed to get documentation on a workaround?

Comment 11

[VanillaMozilla]

Sorry, Alice rightly points out that there's nothing vague about the instructions, at least not at the present time.  And it's not really a mess, either.

But I think the point stands that having to install or reinstall IE7 to get Fx working is unacceptable.  I still think a bug fix and a better workaround are needed here.

I'm trying not to get involved, though, as I have no easy way of checking any of this stuff.  Signing off.

Comment 12

[Kai Liu]

VanillaMozilla, despite what the bug summary suggests, this bug is not related to any of the issues raised in MozillaZine or SUMO.  This particular bug is about a very specific issue (long URLs exposing an error in how the attachment service was being used), and this particular issue (rather, dupe of this bug) has been fixed and verified months ago.

Comment 13

[VanillaMozilla]

Yes, I understand that.  I'm telling you that I'm not sure all the problems are covered by a bug report.  See bug 425946, comment 28.

I'd like to be sure the issues are covered, then I'll bug out, because I don't have a lot of time for this.  I was commenting here since we had a little discussion, to avoid polluting open bugs.