Firefox tabs crashing with ProtectHostImages=y

[Mmoi-Fr]

Describe what you noticed and did

I open FF, browse a bit and then, some tabs start crashing. If I close FF and try to re-open it, it says the binary is corrupted (talking about a dll that is in the sandbox).

After cleaning the sandbox, it's all good again for a bit.

Some configuration that I use:

AutoDelete=y
DenyHostAccess=explorer.exe,n
DenyHostAccess=audiodg.exe,n
DenyHostAccess=keepass.exe,n
#ProtectHostImages=y <- Once commented out, it all works like a charm
UseRamDisk=y
IsProtectScreen=y
BlockInterferePower=y

How often did you encounter it so far?

Ever 3/4 minutes into browsing

Expected behavior

No crash

Affected program

Firefox 132.0.2 (was ok in 131)

Download link

.

Where is the program located?

The program is installed only outside the sandbox.

Did the program or any related process close unexpectedly?

No, not at all.

Crash dump

No response

What version of Sandboxie are you running now?

Sandboxie Plus 1.15.2

Is it a new installation of Sandboxie?

I have been using the same version for some time.

Is it a regression from previous versions?

No

In which sandbox type you have this problem?

In a hardened sandbox with data protection (red sandbox icon).

Can you reproduce this problem on a new empty sandbox?

Not relevant to my request.

What is your Windows edition and version?

W10 21H2 LTSC

In which Windows account you have this problem?

A local account (Administrator).

Please mention any installed security software

No

Did you previously enable some security policy settings outside Sandboxie?

No response

Trace log

No response

Sandboxie.ini configuration

[Firefox]
Enabled=y
AutoRecover=n
BlockNetworkFiles=y
BorderColor=#0000ff,off,6
Template=FileCopy
Template=BlockPorts
Template=LingerPrograms
ConfigLevel=10
UseSecurityMode=y
DropAdminRights=y
AllowNetworkAccess=<BlockNetAccess>,n
BoxNameTitle=-
ShowForRunIn=n
ClosePrintSpooler=y
CopyLimitKb=-1
ForceProcess=firefox.exe
ForceFolder=C:\Program Files\Firefox Developer Edition
ForceFolder=C:\Program Files\Mozilla Firefox
OpenFilePath=firefox.exe,C:\Users\Mx\AppData\Local\Mozilla
OpenFilePath=firefox.exe,C:\Users\Mx\AppData\LocalLow\Mozilla
OpenFilePath=firefox.exe,C:\Users\Mx\AppData\Roaming\Mozilla
ClosedFilePath=<BlockNetDevices>,InternetAccessDevices
ReadKeyPath=firefox.exe,HKEY_CURRENT_USER\SOFTWARE\Microsoft
ReadKeyPath=firefox.exe,HKEY_CURRENT_USER\SOFTWARE\Mozilla
ReadKeyPath=firefox.exe,HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla
ReadFilePath=firefox.exe,C:\Temp\firefox
AutoDelete=y
DenyHostAccess=explorer.exe,n
DenyHostAccess=audiodg.exe,n
DenyHostAccess=keepass.exe,n
#ProtectHostImages=y
UseRamDisk=y
IsProtectScreen=y
BlockInterferePower=y

[offhub]

Try using the following setting:

DontCopy=%ProgramFiles%\Mozilla Firefox\*

Also, delete the sandboxed Firefox files from C:\Sandbox\user\DefaultBox\drive\C\Program Files\Mozilla Firefox.

[Mmoi-Fr]

Try using the following setting:

DontCopy=%ProgramFiles%\Mozilla Firefox\*

Also, delete the sandboxed Firefox files from C:\Sandbox\user\DefaultBox\drive\C\Program Files\Mozilla Firefox.

Thanks! It seems to work fine now :)

Should I mark it as rsolved or will it be used to do / modify a template?

[KztyAQ]

I still get the same crashes, even with "DontCopy" command. Firefox is very sensetive to security. Any security flags applied to it prevents it from being in full Lockdown (verified in about:support) and Sandboxie also prevents hardware rendering, even in green boxes. Firefox additionally isolates itself somehow by using a custom "C:\Users\Data\AppData\Local\Packages" directory. I think by now it can be considered safe and secure trusted software.

[offhub]

@KztyAQ These crashes were related to the ProtectHostImages setting. If you're not using this setting and there are no open issues that match your current problem, you can open a new issue to report it.