New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 661738 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Oct 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Chrome tries 100 times to install GPO-assigned "HTTPS Everywhere", fails, 1GB network usage

Reported by explan...@gmail.com, Nov 2 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.71 Safari/537.36

Steps to reproduce the problem:
1. On Win7 x64 SP1 with all latest updates, assign the "HTTPS Everywhere" extension as a computer-level Chrome extension in Group Policy.
USE THIS TEXT: gcbommkclmclpchllfjekcdonpmejbdp;https://clients2.google.com/service/update2/crx

2. Install Chrome 54 MSI and let it silently update to 54.0.2840.87
3. Launch Chrome
4. Chrome will download and attempt to install "HTTPS Everywhere" 100 times
5. In the extension tab it will then remain greyed out

What is the expected behavior?
Chrome downloads and installs HTTPS Everywhere

What went wrong?
Chrome puts the HTTPS Everywhere icon in the tray but immediately removes it, this repeats 100 times. In the Windows Application log is the following Event ID 1337 from source Chrome:

[1680:908:1102/150402:WARNING:chrome_content_verifier_delegate.cc(183)] Corruption detected in policy extension gcbommkclmclpchllfjekcdonpmejbdp installed at C:\Users\daltest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2016.10.20_94

See screenshots attached.

Did this work before? Yes Unknown, recently

Chrome version: 54.0.2840.78  Channel: stable
OS Version: 7 SP1 x64
Flash Version: Shockwave Flash 23.0.0.205
 
screen.png
104 KB View Download
screen2.png
104 KB View Download
Capture.PNG
26.8 KB View Download
ADDITIONAL COMMENT FROM SUBMITTER:
I've replicated this across two computers and user profiles on a brand-new installs of Windows in Hyper-V with minimal numbers of programs installed. Webroot antivirus is not monitoring the program or directory.

Please send my thanks to whoever put in the 100-attempt limit, it quickly downloads 1GB of these files and it would have consumed the disk otherwise.
ADDITIONAL COMMENT FROM SUBMITTER:
This is not a generic issue, Chrome successfully downloads and installs the uBlock origin extension. Sorry for not being clear.
Labels: Pri-1
Cc: scottmg@chromium.org wfh@chromium.org
Components: Platform>Extensions
+some Windows friends.
Cc: benwells@chromium.org rdevlin....@chromium.org
+rdevlin.cronin@, +benwells: do you have any guesses at the root cause of that message?
Owner: asargent@chromium.org
Status: Assigned (was: Unconfirmed)
Oh dear...

This is because of a bug in content verification where we incorrectly marked these extensions as corrupted (see  issue 643814 ).  The bug has since been fixed, but it wasn't approved for M54 merge.

The fact that chrome is continually retrying to download the extension is based on the fact that since it's policy installed, there was concern around having relaxed limits or backoff, but I wonder if we need to tweak that...
Thanks everyone for the fast response. I did search the error message, but I guess I included too much.

I'm pulling our approval for HTTPS Everywhere from our group policy because we have hundreds of users on a pooled contract of tethered phone data for our laptops. Sorry I didn't submit this earlier, I thought it was just some obscure corner-case on a busted computer.
Actually the fix for  bug 643814  should be in chrome 54.0.2840.34 and higher (It was chrome 53 that we didn't merge it into). But there have still been some reports of problems, so maybe there's another bug we haven't found yet. 

Can you try running chrome with the policy setting to force install the extension, and follow the instructions I posted in comment 37 here:

https://bugs.chromium.org/p/chromium/issues/detail?id=643814#c37

and see if you see a request in the chrome://net-internals Events log for the verification data we need to fetch?




FYI, I've tried this in a test environment where I've either blocked or delayed the "installsource%3Dsignature" request using Fiddler, and if it is blocked then I see the behavior you describe, but if it is just delayed a reasonable amount things work out ok. Any chance you're running some other kind of extension that could be blocking certain requests?
Labels: Needs-Feedback
Project Member

Comment 11 by bugdroid1@chromium.org, Nov 30 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/6014bdfa1f211946627a7085c87fe922e1581fc5

commit 6014bdfa1f211946627a7085c87fe922e1581fc5
Author: asargent <asargent@chromium.org>
Date: Wed Nov 30 21:50:16 2016

Add throttling to corrupt policy extensions reinstall

For crbug.com/447040 (https://codereview.chromium.org/2299203004) we
made it so that enterprise policy force installed extensions would get
automatically reinstalled when we detected corruption. However, we
didn't add in any throttling, which was a bad idea because we turned out
to have a bug ( crbug.com/643814 ) where particular extensions were always
incorrectly detected as corrupt right after install. So at least one
enterprise with one of these extensions in their force install list
ended up having chrome spin in an loop redownloading/reinstalling one of
the affected extensions, eating up tons of bandwidth and disk space.

This CL adds in throttling with an exponentially backed off delay on
each reinstall attempt, up to a maximum of 30 minutes. The delay value
is only maintained in memory during the course of a single run of chrome
and resets after 6 hours (or on browser restart), but should be
sufficient to drastically reduce the problem reported for this bug.

BUG= 661738 

Review-Url: https://codereview.chromium.org/2533873003
Cr-Commit-Position: refs/heads/master@{#435430}

[modify] https://crrev.com/6014bdfa1f211946627a7085c87fe922e1581fc5/chrome/browser/extensions/chrome_content_verifier_delegate.cc
[modify] https://crrev.com/6014bdfa1f211946627a7085c87fe922e1581fc5/chrome/browser/extensions/chrome_content_verifier_delegate.h
[modify] https://crrev.com/6014bdfa1f211946627a7085c87fe922e1581fc5/chrome/browser/extensions/content_verifier_browsertest.cc

Should this be marked fixed, considering #11? Or at least downgraded from Pri1?
Status: Fixed (was: Assigned)
I think we can mark this as fixed.

Sign in to add a comment