Issue 159885 in chromium: Combination of EMET with SEHOP enabled for chrome.exe and extensions using openDatabase() cause extensions to crash on Chrome 23+

[chro...@googlecode.com]

Status: Unconfirmed
Owner: ----
Labels: Feature-Extentions Pri-2 Via-Wizard Type-Bug OS-Windows

New issue 159885 by zit...@gmail.com: Combination of EMET with SEHOP
enabled for chrome.exe and extensions using openDatabase() cause extensions
to crash on Chrome 23+
http://code.google.com/p/chromium/issues/detail?id=159885

UserAgent: Mozilla/5.0 (Windows NT 6.1; rv:16.0) Gecko/20100101 Firefox/16.0

Steps to reproduce the problem:
1. Install Chrome 23
2. Install EMET from
http://www.microsoft.com/en-us/download/details.aspx?id=29851
3. Run EMET, and configure chrome.exe with at least SEHOP checked
4. Restart Chrome, and install a Chrome extension that uses openDatabase(),
such as LastPass

What is the expected behavior?
The extension doesn't crash.

What went wrong?
The extension crashes as soon as openDatabase() is called.

WebStore page:

Did this work before? Yes Chrome 22

Chrome version: 23.0.1271.64 m Channel: stable
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)

[chro...@googlecode.com]

Comment #1 on issue 159885 by camillo....@gmail.com: Combination of EMET

with SEHOP enabled for chrome.exe and extensions using openDatabase() cause
extensions to crash on Chrome 23+
http://code.google.com/p/chromium/issues/detail?id=159885

This also affects some web pages - e.g. Google's own Calendar crashes while
loading and rendering the page. Thus this might not be related only to
extensions.

While this only affects users running EMET, this is a fairly bad issue in
itself. It may indicate a security problem.

[chro...@googlecode.com]

Comment #2 on issue 159885 by derrick....@gmail.com: Combination of EMET

with SEHOP enabled for chrome.exe and extensions using openDatabase() cause
extensions to crash on Chrome 23+
http://code.google.com/p/chromium/issues/detail?id=159885

EMET with SEHOP enabled is also blocking Chrome's embedded PepperFlash that
was updated with v23

Version 23.0.1271.64 m

Name: Shockwave Flash
Description: Shockwave Flash 11.5 r31
Version: 11.5.31.2
Location: C:\Program Files
(x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll

[chro...@googlecode.com]

Comment #3 on issue 159885 by douglas....@gmail.com: Combination of EMET

with SEHOP enabled for chrome.exe and extensions using openDatabase() cause
extensions to crash on Chrome 23+
http://code.google.com/p/chromium/issues/detail?id=159885

Confirmed to be causing the LastPass extension to crash as well. In EMET,
if I un-check SEHOP on the chrome.exe process, the extension functions
normally.