Opened 4 years ago

Last modified 23 months ago

#11254 new defect

Tor Browser bundle v3.5 fails to clean up cancelled downloads in Temp folder

Reported by: ericlaw Owned by: tbb-team
Priority: High Milestone:
Component: Applications/Tor Browser Version:
Severity: Major Keywords: tbb-disk-leak, tbb-torbutton
Cc: Actual Points:
Parent ID: #7449 Points:
Reviewer: Sponsor:

Description

  1. Run TBB v3.5.3
  2. Click on a link to download an archive or any file type not natively handled by the browser
  3. Wait for the download to complete
  4. Observe that <random>.ext.part file is created containing entire file contents in the system's %temp% folder.
  5. In the Open/Save dialog box click Cancel.
  6. Observe that the temp-created file is not removed.
  7. Close Firefox/TBB.
  8. Observe that the temp-created file is not removed.

Firefox 28's Private Mode does not have this bug.
I observed this bug in TBB v2.x as well.

Child Tickets

Change History (8)

comment:1 Changed 4 years ago by ericlaw

This was seen in multiple sessions on Windows 8.1 with all patches.

comment:2 Changed 4 years ago by WithinRafael

Reproduced with 3.5.2-Windows and 3.5.3-Windows.

.part is not present in %temp%, instead residing in whichever directory chosen for file storage at download time. Closure of browser did not clean up.

comment:3 Changed 4 years ago by ericlaw

In my case, the user isn't prompted for a target location (perhaps because the download was small and completed before the prompt could be shown), so the file ends up in the Windows Temp folder.

comment:4 Changed 4 years ago by gk

Keywords: tbb-disk-leak added; privacy removed
Milestone: TorBrowserBundle 2.3.x-stable
Priority: criticalmajor
Version: Tor: unspecified

I see stuff in /tmp on Linux as well.

comment:5 Changed 4 years ago by tortestuser

Parent ID: #7449

comment:6 Changed 3 years ago by erinn

Component: TorBrowserButtonTor Browser
Keywords: tbb-torbutton added
Owner: changed from mikeperry to tbb-team

comment:7 Changed 3 years ago by ericlaw

Still repros in 3.6.5.

comment:8 Changed 23 months ago by bugzilla

Severity: Major

Firefox 28's Private Mode does not have this bug.

Described problem FIXED, but
according to Disk Avoidance: no temp files on disk too! (Cause they can easily be restored from FS! Or wipe file after deletion #10756 (but secure wipe is too time consuming).
And after downloading an .exe TBB 5.5 (firefox.exe) starts to connect to local DNS Server!!!!!!!!!!!!!
So, please, extend this ticket or create a new one.

Last edited 23 months ago by bugzilla (previous) (diff)
Note: See TracTickets for help on using tickets.