Chrome online installer and sansboxie

[David Xanatos]

Hi,

I'm the maintainer of the sandboxie project (https://github.com/sandboxie-plus/) and am trying to resolve a compatibility issue with the chrome online installer.

It fails to operate properly when there is IPC isolation in place.

As far as I traced the issue it seams that goopdate.dll some where takes a wrong turn, instead of spawning two more instanced of GoogleUpdate.exe

GoogleUpdate.exe /ping

and

GoogleUpdate.exe /handoff

it instead tries to create and start GoogleUpdate.exe as service.

This later on also fails with it not being able to perform the download.

I wanted to inquire if the installer used is also open source some ware and / or if there are debug symbols available for the official version?

Cheers

David X.

[Joe Mason]

GoogleUpdate is a branded version of the open-source Omaha client (https://github.com/google/omaha), much like Chrome is a branded version of open-source Chromium.

I also found this in the chromium source, but I'm not sure how it relates: https://source.chromium.org/chromium/chromium/src/+/master:google_update/

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/chromium-dev/01089b6a-910d-4e75-a7c8-bc08cba57aean%40chromium.org.

[Sorin Jianu]

On Tuesday, February 9, 2021 at 4:36:49 PM UTC-8 xanato...@gmail.com wrote:

Hi,

I'm the maintainer of the sandboxie project (https://github.com/sandboxie-plus/) and am trying to resolve a compatibility issue with the chrome online installer.

It fails to operate properly when there is IPC isolation in place.

As far as I traced the issue it seams that goopdate.dll some where takes a wrong turn, instead of spawning two more instanced of GoogleUpdate.exe

GoogleUpdate.exe /ping

and

GoogleUpdate.exe /handoff

it instead tries to create and start GoogleUpdate.exe as service.

This later on also fails with it not being able to perform the download.

We need to get a GoogleUpdate logs for both cases (with and without IPC isolation, then compare the execution flows).

To get a log, plz try following the steps: https://support.google.com/chrome/a/answer/6350036?hl=en#zippy=%2Ccreate-a-log-file or https://github.com/google/omaha/blob/master/doc/ClientLog.md

We see /ping and /handoff processes being started because GoogleUpdate detects that another version of it has been installed already (and it is trying to `handoff` to it), and it is attempting to send a telemetry `ping` to its backend.

In the other case, when IPC isolation is in place, it may be possible that something is preventing its RPC to work properly, the execution path follows the path of a new GoogleUpdate install, which results in a new service being installed, etc. If RPC malfunctions, then that could be a reason why the download fails.

 

I wanted to inquire if the installer used is also open source some ware

The GoogleUpdate code is open source at https://github.com/google/omaha but Google is shipping an internal build, which is slightly different, bitwise, than what is open sourced (different constants, guids, and some cloud management features turned on).

 

and / or if there are debug symbols available for the official version?

We don't have the debug symbols available but I could share them with you if needed.

 

Cheers

David X.