Sandboxie-Plus v1.0.15

This build fixed a security issue and many other issues as well.

Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.15
Download: https://github.com/sandboxie-plus/Sandboxie/releases/tag/1.0.14

ChangeLog

Fixed

• fixed memory corruption introduced in the last build causing chrome to sometimes crash.
• FIXED SECURITY ISSUE: NtCreateSymbolicLinkObject was not filtered (thanks Diversenok)

Added

• added notification window to warn that the default update checker is often behind the newest release on GitHub, to ensure that only bug-free builds are offered as updates #1682
• added main browsers to BlockSoftwareUpdaters template (by Dyras) #1630
• added a warning when sandboxie-plus.ini is not writable #1681
• added cleanup for critical sections (by chunyou12 #1686

Changed

• improved command line handling for breakout processes #1655
• disabled SBIE2193 notification (by isaak654) #1690
• improved error message 6004 #1719

Fixed

• fixed dark mode issue with the new tray list
• fixed now showing a warning when sandboxie-plus.ini is not writable #1681
• fixed issue with software compatibility checkbox (thanks MitchCapper) #1678
• fixed issue with events on box close not always being executed #1658
• fixed memory leaks in key_merge.c
• fixed issue enumerating registry keys in privacy mode
• fixed setting issue introduced in 1.0.13 #1684
• fixed crash issue when parsing firewall port options
• FIXED SECURITY ISSUE: in certain usage cases a sandboxed process could obtain a handle on a unsandboxed thread with write privileges #1714

 

Many thanks for this version @DavidXanatos !
Running in portable mode and so far so good.
It feels like v1.x has now truly come of age.

 

Going good here on the Windows 11 Machine, thanks David!

 

Did anything change with 1.0.14 that may affect Chrome 99.0.4844.82?
My Chrome sbox crashes with 1.0.14.

My Chrome sbox does not crash with 1.0.13.

My Edge sbox does not crash with 1.0.14.
My Firefox sbox does not crash with 1.0.14.

My Chrome run in 1.0.14 DefaultBox (default settings)

W10 Home 21H2 (19044.1526)

 

Chrome (latest) crashes within Sandboxie Classic 5.55.14 - Windows 11.
I got the same error codes as bjm_ reported.
No issues with SBIE Classic 5.55.13

 

Can also confirm Chrome won't launch with SB + 1.0.14 on Windows 11 & SB Classic 5.5.14 on Win 10. Have tested 1.0.14 with all my other browsers now: FF, Edge, Brave & Vivaldi and all work fine. It's just Chrome that won't work.

 

Chrome doesn't work on Windows 10 LTSC 1809 either. Error screenshot below. I was using Plus 1.0.14.
When uninstalling, SbieDrv.sys couldn't be deleted. I could delete it after restart. This file prevented downgrading as well.
Back to 1.0.13 for now.

 

mmh... this is interesting... for me the newest chrome on 2004 works just fine as well as on win 11 latest insider.
can you please test with a clean box or with entirely default settings.

you could also try taking the sbiesvc.exe + sig and sbiedll.dll from the previosue build and test in whcih combination the error occurs that would help to pin down in which component the issue resides

 

Works well with Firefox & Edge

 

it has to work with chrome as well... and for me it does so it may be related to some setting or something like this

 

I've installed the latest version. All browsers are working but Chrome!
Chrome does not work with the newest Sandboxie.
It shuts down automatically within very few seconds after starting.
Google Chrome is my wife's browser.
I need help.

 

Replacing SbieDll.dll with v5.55.13.0 solves the Chrome issue for me.

 

This is very good, as it means the potential changes which broke it are only very few.
64 bit chrome? Do you use privacy mode, or rule specificity? Could you please post your sandboxie.ini

I need to reproduce this here locally, but if that fails I could post a few custom sbiedll.dll's with incremental changes

 

Chrome 99.0.4844.82 (64-bit), Windows 10 21H2 (64-bit, 19044.1586)

Spoiler: config, works with .13 but not .14

Code:

[TESTBox]
Enabled=y
AutoRecover=y
BlockNetworkFiles=y
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00ffff,ttl,6
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
ConfigLevel=9
UsePrivacyMode=n
BoxNameTitle=-
CopyLimitKb=81920

Code:

[GlobalSettings]
FileRootPath=E:\test\%USER%\%SANDBOX%
SeparateUserFolders=y
KeyRootPath=\REGISTRY\USER\test_%USER%_%SANDBOX%
IpcRootPath=\test\%USER%\%SANDBOX%\ses_%SESSION%
EditAdminOnly=n
ForceDisableAdminOnly=n
ForgetPassword=n
Template=RpcPortBindings
Template=OfficeLicensing
Template=OfficeClickToRun
Template=7zipShellEx
TemplateReject=WindowsRasMan
TemplateReject=WindowsLive
TemplateReject=RTSS
NetworkEnableWFP=y
EnableObjectFiltering=y
EnableWin32kHooks=y

Also with v5.55.14.0, sometimes I was getting an error that says "SBIE2310 Name buffer is approaching overflow (-)" when I start the Chrome.

 

Strangely enough here the affected latest Chrome-64bit-version (99.0.4844.82) will start without issues with Sbie-Plus-v1.0.14 and latest Win10fWpro-21H2.

Could hint to a settings-issue or Win11. If I read the reports correctly Win10 has not been reported to be affected with Sbie-Plus-v1.0.14, only with the classic-variant.

Or could it be that those users affected may have run into some Chrome-auto-update-problem with Chrome unsolicitedly upgrading and with the browser still having been forced to run sandboxed and thereby resulting in an incomplete/unsuccessful update? Just my 2 cents.

 

In this zip: xanasoft.com/Downloads/test_1.0.14.zip you can find 2 sbiedll.dll's please test booth and report back which one fixes the issue.
Not this is not a real fix, just changes reverted to 1.0.13 so once i know which change is the culprit I'll upload a bunch more dll's to test a proper fix or narrow the issue down even further.

 

I'm using Chrome from custom location.

If I run it from custom location it crashes.

Code:

S:\Programxxx\Google\Chrome\chromexxxxx_extract_here_sandboxie\99.0.4844.82_chrome_installer\chrome\Chrome-bin\chrome.exe

If I run it from ProgramFiles location it doesn't crash.

Code:

C:\Program Files\Programxxx\Google\Chrome\chromexxxxx_extract_here_sandboxie\99.0.4844.82_chrome_installer\chrome\Chrome-bin\chrome.exe

EDIT: Ok i'm testing

 

Test-1 works
Test-2 crashes

 

SbieDll.dll from Folder 1 = no crash
SbieDll.dll from Folder 2 = crash

 

ok please test this one: xanasoft.com/Downloads/SbieDll_test1.zip

 

@DavidXanatos SbieDll_test1 no crash

 

yes so its fixed nice

 

SbieDll.dll from SbieDll_test1 = no crash

 

What was the culprit?

 

a small oversight