Opened 9 months ago

Last modified 8 months ago

#27608 new defect

TB 8.5a1 failed to check for noscript updates because of missing manifest type

Reported by: traumschule Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-8.0-issues, noscript
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Sep 10 10:53:28.000 [notice] Heartbeat: Tor's uptime is 2 days 6:00 hours, with <scrubbed>
Sep 10 10:53:28.000 [notice] Average packaged cell fullness: 41.919%. TLS write overhead: 4%                                                                   
1536579353342   addons.update-checker   WARN    onUpdateCheckComplete failed to determine manifest type                                                       
1536579353346   addons.update-checker   WARN    onUpdateCheckComplete failed to determine manifest type                                                       
1536579355554   addons.update-checker   WARN    onUpdateCheckComplete failed to parse update manifest: [Exception... "Update manifest is missing a required add
ons property."  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://gre/modules/addons/AddonUpdateChecker.jsm :: getRequiredProperty :
: line 461"  data: no] Stack trace: getRequiredProperty()@resource://gre/modules/addons/AddonUpdateChecker.jsm:461                                            
parseJSONManifest()@resource://gre/modules/addons/AddonUpdateChecker.jsm:471                                                                                  
parser()@resource://gre/modules/addons/AddonUpdateChecker.jsm:631                                                                                             
onLoad()@resource://gre/modules/addons/AddonUpdateChecker.jsm:651                                                                                             
UpdateParser/<()@resource://gre/modules/addons/AddonUpdateChecker.jsm:576                                                                                     
1536579355585   addons.update-checker   WARN    onUpdateCheckComplete failed to parse update manifest: [Exception... "Update manifest is missing a required add
ons property."  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: resource://gre/modules/addons/AddonUpdateChecker.jsm :: getRequiredProperty :
: line 461"  data: no] Stack trace: getRequiredProperty()@resource://gre/modules/addons/AddonUpdateChecker.jsm:461                                            
parseJSONManifest()@resource://gre/modules/addons/AddonUpdateChecker.jsm:471                                                                                  
parser()@resource://gre/modules/addons/AddonUpdateChecker.jsm:631                                                                                              
onLoad()@resource://gre/modules/addons/AddonUpdateChecker.jsm:651
UpdateParser/<()@resource://gre/modules/addons/AddonUpdateChecker.jsm:576                                                                                     
1536579355754   addons.update-checker   WARN    onUpdateCheckComplete failed to determine manifest type                                                       
1536579360152   addons.webextension.<unknown>   WARN    Loading extension 'null': Reading manifest: Error processing background.persistent: Event pages are not
 currently supported. This will run as a persistent background page.                                                                                          
1536579360593   addons.xpi      WARN    Please specify whether you want browser_style or not in your options_ui options.                                      
1536579362206   addons.webextension.<unknown>   WARN    Loading extension 'null': Reading manifest: Error processing background.persistent: Event pages are not
 currently supported. This will run as a persistent background page.                                                                                           
1536579362325   addons.webextension.{73a6fe31-595d-460b-a920-fcc0f8843232}      WARN    Loading extension '{73a6fe31-595d-460b-a920-fcc0f8843232}': Reading man
ifest: Error processing background.persistent: Event pages are not currently supported. This will run as a persistent background page.                         
1536579362437   addons.webextension.{73a6fe31-595d-460b-a920-fcc0f8843232}      WARN    Please specify whether you want browser_style or not in your browser_ac
tion options.                                                                                                                                                 

Child Tickets

Attachments (1)

{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi (446.6 KB) - added by traumschule 8 months ago.
Looking at the first link my guess is that it tries to update an addon. Installing the named xpi from TorBrowser/Data/Browser/profile.default/extensions/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi it offered me to install Noscript. Maybe it the manifest type is not set correctly?

Download all attachments as: .zip

Change History (6)

comment:1 Changed 9 months ago by traumschule

Summary: TB 8.5a1: messages from the upgrade engineTB 8.5a1: messages from the update engine

comment:2 Changed 9 months ago by gk

Keywords: tbb-8.0-issues added
Status: newneeds_information

Hm, I think I've seen that, too. Do you know how to trigger it, so we can narrow it down? I wonder what addons.webextension.<unknown> points to. Moving this tentatively to tbb-8.0-issues.

Changed 8 months ago by traumschule

Looking at the first link my guess is that it tries to update an addon. Installing the named xpi from TorBrowser/Data/Browser/profile.default/extensions/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi it offered me to install Noscript. Maybe it the manifest type is not set correctly?

comment:4 Changed 8 months ago by traumschule

Status: needs_informationnew

does this help or should i poke my logs a bit more?

,{"id":"{73a6fe31-595d-460b-a920-fcc0f8843232}","syncGUID":"{679a3a4d-4728-44ef-b1a3-9e0b5637f057}","location":"app-profile","version":"10.1.9.6","type":"webextension","internal
Name":null,"updateURL":null,"updateKey":null,"optionsURL":"ui/options.html","optionsType":3,"optionsBrowserStyle":true,"aboutURL":null,"defaultLocale":{"name":"NoScript","descri
ption":"Extra protection for your Firefox: NoScript allows JavaScript, Flash (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This
whitelist based pre-emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality… Experts will agree: Fire
fox is really safer with NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null},"visible":true,"active":true,"userDisabled":false,"appDisabled":f
alse,"installDate":946684800000,"updateDate":1537011357000,"applyBackgroundUpdates":1,"bootstrap":true,"path":"[...]tor-browser8.0a10/Browser
/TorBrowser/Data/Browser/profile.default/extensions/{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi","skinnable":false,"size":1001138,"sourceURI":"https://addons.cdn.mozilla.net/user
-media/addons/722/noscript_security_suite-10.1.9.6-an+fx.xpi?filehash=sha256%3A336ae26d0a70688e6c2b3c14267c9e80f52f6f36c31f23b8242e0edae3666d42","releaseNotesURI":"https://addon
s.mozilla.org/versions/updateInfo/2532678/en-US/","softDisabled":false,"foreignInstall":true,"strictCompatibility":true,"locales":[{"name":"NoScript","description":"Extra protec
tion for your Firefox: NoScript allows JavaScript, Flash (and other plugins) only for trusted domains of your choice (e.g. your home-banking web site). This whitelist based pre-
emptive blocking approach prevents exploitation of security vulnerabilities (known and even unknown!) with no loss of functionality… Experts will agree: Firefox is really safer
with NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["en"]},{"name":"NoScript","description":"Une protection supplémentaire pour
 votre Firefox : NoScript autorise JavaScript, Flash (et autres greffons) seulement pour les domaines de votre choix (p. ex. le site Web de votre banque). Cette approche de bloc
age préemptif, fondé sur une liste blanche, prévient l’exploitation de vulnérabilités informatiques (connues et inconnues) sans perte de fonctionnalité. Les experts seront d’acc
ord : Firefox est vraiment plus sûr avec NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["fr"]},{"name":"NoScript","description"
:"Protezione extra per Firefox: NoScript consente JavaScript, Flash (e altri plug-in) solo per domini verificati di tua scelta (ad es. il tuo sito web di home banking). Questo a
pproccio di blocco preventivo basato su whitelist previene lo sfruttamento delle vulnerabilità della sicurezza (note e persino sconosciute!) senza alcuna perdita di funzionalità
… Gli esperti saranno d‘accordo: Firefox è davvero più sicuro con NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["it"]},{"name"
:"NoScript","description":"Zusätzliche Sicherheit für Ihren Firefox: Mit NoScript können Sie JavaScript, Flash, Java und andere ausführbare Inhalte bloß auf vertrauenswürdigen D
omains Ihrer Wahl zulassen, z.B. beim Online-Banking. Dieser whitelist-basierte präventive Ansatz verhindert das Ausnutzen von (bekannten und unbekannten!) Sicherheitslücken ohn
e Verlust an Funktionalität… Experten sind sich einig: Firefox wird wirklich noch sicherer mithilfe von NoScript ;-)","creator":null,"developers":null,"translators":null,"contri
butors":null,"locales":["de"]},{"name":"NoScript","description":"Protecció addicional per al vostre Firefox: NoScript permet JavaScript, Flash (i altres connectors) només per al
s dominis de confiança que trieu (p. ex. el web de banca de la llar). L'enfocament de bloqueig preventiu basat en la llista blanca evita l'explotació de vulnerabilitats de segur
etat (conegudes i fins i tot desconegudes) sense pèrdua de funcionalitat... Els experts hi estan d'acord: Firefox és realment més segur amb NoScript :-)","creator":null,"develop
ers":null,"translators":null,"contributors":null,"locales":["ca"]},{"name":"NoScript","description":"为 Firefox 提供额外的保护:NoScript 只允许在您选择的信任域执行 JavaScript、F
lash 以及其他插件(比如您的家庭银行网站)。这种基于预设白名单的拦截策略可以防止(已知或未知的)安全漏洞攻击,同时不损失任何功能…专业人士也会同意:NoScript 让 Firefox 更安全 :-)"
,"creator":null,"developers":null,"translators":null,"contributors":null,"locales":["zh-CN"]},{"name":"NoScript","description":"Дополнительная защита для Firefox: NoScript позво
ляет разрешать JavaScript, Flash (и другие плагины) только для доверенных доменов, выбранных вами (например: сайт банковского обслуживания). Белый список, основанный на принципе
 упреждающего блокирования, позволяет предотвратить использование уязвимостей (известных и еще не известных!) без потери функциональности… Эксперты соглашаются: Firefox действит
ельно безопаснее с NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["ru"]},{"name":"NoScript","description":"Gwarez ouzhpenn evit
 ho Firefox: NoScript a aotren JavaScript, Flash (ha lugantoù all) nemetken evit an domanioù a c'heller kaout fiziañs enno diouzh ho c'hoant (da skouer, ho lec'hienn bank er gêr
). An hentenn stankañ-mañ dizarbenn diazezet war ar wennlistenn a vir ouzh ar c'horvoiñ frailhoù surentez (anaveet ha dianaveet!) Hep koll arc'hweladur ebet... An dud arbennig a
 lavaro deoc'h: Firefox a zo suroc'h hag a galz gant NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["br"]},{"name":"NoScript","
description":"Protección adicional para tu Firefox: NoScript permite JavaScript, Flash (y otros plugins) sólo para dominios de confianza de su elección (por ejemplo, su sitio we
b de banca en casa). Este enfoque de bloqueo preventivo basado en listas blancas evita la explotación de vulnerabilidades de seguridad (¡conocidas e incluso desconocidas!) sin p
érdida de funcionalidad... Los expertos estarán de acuerdo: Firefox es realmente más seguro con NoScript :-)\n\nTraducción realizada con el traductor www.DeepL.com/Translator","
creator":null,"developers":null,"translators":null,"contributors":null,"locales":["es"]},{"name":"NoScript","description":"Proteção extra para o seu Firefox: NoScript permite Ja
vaScript, Flash (e outros plugins) somente para domínios confiáveis de sua escolha (por exemplo, o site de seu home-banking). Esta abordagem de bloqueio preventivo baseada em li
sta de permissões impede a exploração de vulnerabilidades de segurança (conhecidas e até mesmo desconhecidas!) sem perda de funcionalidade... Especialistas vão concordar: o Fire
fox é muito mais seguro com o NoScript :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["pt-BR"]},{"name":"NoScript","description":"Firefo
x için ek koruma: NoScript, yalnız güvenilir olarak seçtiğiniz etki alanları için (İnternet bankacılığı gşbş) JavaScript, Flash (ve diğer uygulama ekleri) gibi bileşenlere izin
verir. Bu beyaz liste temelli engelleme yaklaşımı, herhangi bir özellik kaybına neden olmadan güvenlik açıklarından yararlanılmasını engeller (bilinen ve bilinmeyen!)... Uzmanla
r Firefox uygulamasının NoScript ile gerçekten güvenli olduğu konusunda hemfikir :-)","creator":null,"developers":null,"translators":null,"contributors":null,"locales":["tr"]},{
"name":"NoScript","description":"Extra bescherming voor uw Firefox: NoScript staat JavaScript, Flash en andere plug-ins alleen toe voor vertrouwde domeinen van uw keuze (zoals u
w website voor thuisbankieren). Deze op een toestemmingenlijst gebaseerde preventieve benadering van blokkering voorkomt exploitatie van beveiligingskwetsbaarheden (bekende en z
elfs onbekende!) zonder verlies van functionaliteit… Experts zijn het ermee eens: Firefox is echt veiliger met NoScript. :-)","creator":null,"developers":null,"translators":null
,"contributors":null,"locales":["nl"]}],"targetApplications":[{"id":"toolkit@mozilla.org","minVersion":"59.0","maxVersion":null}],"targetPlatforms":[],"multiprocessCompatible":t
rue,"signedState":2,"seen":true,"dependencies":[],"hasEmbeddedWebExtension":false,"userPermissions":{"permissions":["contextMenus","privacy","storage","tabs","unlimitedStorage",
"webNavigation","webRequest","webRequestBlocking"],"origins":["<all_urls>"]},"icons":{"48":"img/icon48.png","96":"img/icon96.png","256":"img/icon256.png"},"iconURL":null,"icon64
URL":null,"blocklistState":0,"blocklistURL":null,"startupData":null},{"id":... [another addon]

You can see that no manifest is defined.

comment:5 Changed 8 months ago by traumschule

Keywords: noscript added
Summary: TB 8.5a1: messages from the update engineTB 8.5a1 failed to check for noscript updates because of missing manifest type
Note: See TracTickets for help on using tickets.