TestApp binaries from cefbuilds.com don't work

[Czarek]

Downloaded "TestApp" binaries for Windows 32bit for the following branches: trunk, 2062, 1916, 1750, and for all of them when launching cefclient.exe all I get is an empty browser window. Logs from debug.log:

Code: Select all

[0814/141812:ERROR:child_process_launcher.cc(332)] Failed to launch child process


Only branch 1650 binaries do work.

[magreenblatt]

cef_binary_3.2078.1802_windows32_client works for me with Windows 8.1 64-bit. What windows version are you testing on?

[Czarek]

Windows 7 64bit with all updates.

[magreenblatt]

How are you running the exe? Double-clicking from Windows Explorer?

[Czarek]

Yes, I've been running from explorer, and from total commander as well.

It seem that this issue occurs only when running Online Armor firewall. I don't have problems running other applications, although I resemble a similar issue when Google Chrome updated to version 33 (branch 1750).

Here are logs from Online Armor:

Code: Select all

Program Guard: cefclient.exe,14/8/2014 3:23:08 PM,Allowed,C:\Program Files (x86)\totalcmd\TOTALCMD64.EXE -> C:\cefpython\cef_binary_3.1750.1805_windows32_client\Release\cefclient.exe

Program Guard: cefclient.exe,14/8/2014 3:23:08 PM,Allowed,C:\cefpython\cef_binary_3.1750.1805_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Windows\Performance\WinSAT\DataStore\* * Formal.Assessment (*).WinSAT.xml

Program Guard: kernel event,14/8/2014 3:23:08 PM,None,"OADriver: OB_OPERATION_HANDLE_DUPLICATE, PID: 5040, pid: 2512, SP: 274352944, TP: 274352944, Mask: 1FFFFF - 1FF414",2512 - cefclient.exe 5040 - cefclient.exe
Program Guard: kernel event,14/8/2014 3:23:08 PM,None,"OADriver: OB_OPERATION_HANDLE_DUPLICATE, PID: 5040, pid: 2512, SP: 274352944, TP: 274352944, Mask: 1FFFFF - 1FFBCC",2512 - cefclient.exe 5040 - cefclient.exe

Program Guard: cefclient.exe,14/8/2014 3:23:09 PM,Allowed,C:\cefpython\cef_binary_3.1750.1805_windows32_client\Release\cefclient.exe -> C:\cefpython\cef_binary_3.1750.1805_windows32_client\Release\cefclient.exe

Program Guard: kernel event,14/8/2014 3:23:09 PM,None,"OADriver: OB_OPERATION_HANDLE_DUPLICATE, PID: 5040, pid: 4736, SP: 274352944, TP: 274352944, Mask: 1FFFFF - 1FFBCC",4736 - cefclient.exe 5040 - cefclient.exe
Program Guard: kernel event,14/8/2014 3:23:09 PM,None,"OADriver: OB_OPERATION_HANDLE_DUPLICATE, PID: 5040, pid: 4736, SP: 274352944, TP: 274352944, Mask: 1FFFFF - 1FF414",4736 - cefclient.exe 5040 - cefclient.exe


When running branch 1650 TestApp cefclient, logs from Online Armor look like this:

Code: Select all

Program Guard: cefclient.exe,14/8/2014 3:30:06 PM,Allowed,C:\Program Files (x86)\totalcmd\TOTALCMD64.EXE -> C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe
Program Guard: cefclient.exe,14/8/2014 3:30:06 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Windows\Performance\WinSAT\DataStore\* * Formal.Assessment (*).WinSAT.xml
Firewall: User decision,14/8/2014 3:30:07 PM,Allowed,"C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe, Incoming TCP access allowed to: 127.0.0.1:8088"
Program Guard: cefclient.exe,14/8/2014 3:30:08 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe -> C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe
Firewall: Automatic decision,14/8/2014 3:30:11 PM,Allowed,"C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe, Outgoing TCP access allowed to: 74.125.136.99:80"
Firewall: Automatic decision,14/8/2014 3:30:11 PM,Allowed,"C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe, Outgoing TCP access allowed to: 74.125.136.94:443"
Program Guard: cefclient.exe,14/8/2014 3:30:11 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
Program Guard: cefclient.exe,14/8/2014 3:30:11 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
Program Guard: cefclient.exe,14/8/2014 3:30:11 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*
Program Guard: cefclient.exe,14/8/2014 3:30:11 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\*
Program Guard: cefclient.exe,14/8/2014 3:30:11 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\CRLs\*
Program Guard: cefclient.exe,14/8/2014 3:30:13 PM,Allowed,C:\cefpython\cef_binary_3.1650.1639_windows32_client\Release\cefclient.exe wants to get a list of the files C:\Users\ctomczak\AppData\Roaming\Microsoft\SystemCertificates\My\CTLs\*


Something has changed in branch 1750 in regards to launching sub-processes and now Online Armor treats this activity as Suspicious. I've googled for "OADriver: OB_OPERATION_HANDLE_DUPLICATE" and found this on MSDN:

Code: Select all

OB_OPERATION_HANDLE_CREATE
A new process handle or thread handle was or will be opened.
OB_OPERATION_HANDLE_DUPLICATE
A process handle or thread handle was or will be duplicated.


I've tried searching Chromium sources but didn't found any refereces to any of these handles.

[magreenblatt]

Sounds like a bug in Online Armor.

[ekovalyov]

I have the same problem with cef_sandbox.lib
Try the workaround
cefclient.exe --no-sandbox
or compile with
#define CEF_ENABLE_SANDBOX 0

[Czarek]

I have the same problem with cef_sandbox.lib
Try the workaround
cefclient.exe --no-sandbox
or compile with
#define CEF_ENABLE_SANDBOX 0

Thanks ekovalyow. You are right, running cefclient built without sandbox support does not cause issues with Online Armor anymore.