helge17 / tuxguitar

Improve TuxGuitar and provide builds
Other
492 stars 42 forks source link

Install breaks windows #575

Closed peternschmit closed 6 days ago

peternschmit commented 1 week ago

I saw this post on r/opensource recently.

Tuxguitar just murdered my pc.

Has anyone else experienced this? I unfortunately can corroborate; Tux just bricked my Windows 11 install.

guiv42 commented 1 week ago

That is, let's say... surprising. Could you please precise which version ?

According to github download stats, the windows installer of last release (1.6.4) has been downloaded >15k times, and it's the very first report of such an issue. Unfortunately I have no Win11 configuration to test

Edit: according to the reddit post linked in your message, TuxGuitar has been identified as "suspect" on some systems. Do you have more information about this? We already had a problem of false positives by some anti-malware on version 1.6.1 (see #312), but since then I never heard of this

helge17 commented 1 week ago

Just checked tuxguitar-1.6.4-macosx-swt-cocoa-x86_64.app.tar.gz, tuxguitar-1.6.4-windows-swt-x86_64-installer.exe and tuxguitar-1.6.4-windows-swt-x86_64.zip with MS Defender on an up-tp-date Windows 10. Installed tuxguitar-1.6.4-windows-swt-x86_64-installer.exe, compared the files on Github with the originak files on my build system and compare sha256 sums. Currently I cannot find any problem or mismatch.

Did you check the sha256 sums of the downloaded files?

My files are not signed with an official developer key, maybe this makes them "suspect" (see #411)?

Detailed error messages would be very helpful.

I'll redo the tests on Windows 11 in the next days.

helge17 commented 1 week ago

I have checked all 1.6.4 files with VirusTotal: As of today, all files have been marked as clean by all available security vendors.

tuxguitar-1.6.4-freebsd-swt-amd64.tar.gz tuxguitar-1.6.4-linux-swt-amd64.deb tuxguitar-1.6.4-linux-swt-amd64.tar.gz tuxguitar-1.6.4-macosx-swt-cocoa-x86_64.app.tar.gz tuxguitar-1.6.4-windows-swt-x86_64-installer.exe tuxguitar-1.6.4-windows-swt-x86_64.zip tuxguitar-1.6.4_linux-swt.x86_64.rpm tuxguitar-android-1.6.4-release-signed.apk

I also virus-checked and installed the file tuxguitar-1.6.4-windows-swt-x86_64-installer.exe on Windows 11 23H2: No problem.

The user on Reddit confirmed that the security warning on his PC was only related to the missing digital signature of the installer and not to a virus warning. https://www.reddit.com/r/opensource/comments/1gfcwn1/comment/luh0x3l/

We are trying to make the Windows installer in the tuxguitar-next branch more robust, e.g. with commit b9ccf208a63a1a845eb373cf4c34babe40b0d91e. Other than that, I don't know how to help here at the moment without more details. I suspect that the problem occurred more or less by accident when installing TuxGuitar. If you search the internet, you'll find tons of cases and reasons why Windows 11 hangs on boot.

peternschmit commented 6 days ago

My issue didn't stop at the warning, though I did experience that too. For me, after the install, any subsequent boots into Windows 11 stopped at "Automatic Repair," which failed to resolve the issue, leaving me stuck. In the end I just reinstalled the OS. Unfortunately I don't have any error messages or traces of what occurred, so I'll just close this conversation and consider it a fluke.