Dataloss Bug in Latest Windows Installer Builds Can Delete Contents of Program Files Folder

Thursday February 5th, 2004

A serious bug in the latest Windows installer builds of the Mozilla Application Suite can lead to users having the entire contents of their Program Files folder deleted. The problem is present in the 2004-02-03-18 and later trunk Windows installer and net installer builds. The affected binaries have had the suffix -dangerous added to their filenames and been removed from the latest-trunk and latest directories on the FTP site. Testers are strongly advised not to download these dangerous builds. The issue is being tracked in bug 233014 (please do not add unnecessary comments to this bug). Thanks to Zbigniew Braniecki for alerting us to this problem.

Update: The bug is now fixed and latest Windows installer and net installer builds do not exhibit the problem.

#31 Re: Reply

by jgraham

Friday February 6th, 2004 3:41 PM

You are replying to this message

I believe this is because extensions can do far more than just dump a jar file in your profile directory and add a few lines to installed-chrome.txt. I believe, for example, that it is quite possible for an extension to write files to anywhere on the disc to which the user has access. Given this, it's prett hard to write an uninstaller that works in all cases without ever causing dataloss.

There has certianly been talk of writing an uninstaller tpo deal with the common case of chrome directory installations. Of course, talk is useless unless it's backed up by code.