sandboxie-plus / Sandboxie

Sandboxie Plus & Classic
https://Sandboxie-Plus.com
GNU General Public License v3.0
13.68k stars 1.52k forks source link

Old good SBIE 2310 "Name buffer overflow" is back/still here for newest builds since v. 5.53.1/0.9.8b #1597

Closed MuddyBleach closed 2 years ago

MuddyBleach commented 2 years ago

What happened?

As known by the oldfags, there is an annoying long persistent multiplying SBIE 2310 "Name buffer overflow" error that tends to pop out with a vaste amount of older games, like Arcania, Wolveryne, Legendary and many others so they cannot start or close after a couple of seconds, first introduced in Sophos builds.

A remarkable thing about it is that it is somehow closely related to the way we launch the affected application:

Through a series of recent builds most of those games could be played sandboxed though, when either run directly or from the context menu. Something has changed in 5.53.1/0.9.8b and it stays the same in every further version.

The current behaviour is as follows:

  1. Sandboxie versions before 5.53.1/0.9.8b:
  1. Sandboxie versions after 5.53.1/0.9.8b,, inclusive of 5.55.9/1.0.9.

As you can see, Sandboxie-Plus goes halffunctional and Sandboxie-Classic fully unfunctional in that scenario now, might it be because of specific updated adjustable restrictions or be hardcoded in the sandboxing program itself.

This overflow issue has been announced to be overcome in an earlier ticket, namely Sandboxie 5.53.2 - SBIE2310 SBIE2335 SBIE2336 #1342. But unfortunatelly that seems not to be the case.

To Reproduce

Start an older game like Arcania, Wolveryne, Legendary etc, overflow overflow plus

Game cannot be started.

Expected behavior

Application starts normally as with previous versions of Sandboxie or non-sandboxed

What is your Windows edition and version?

Windows 10 PRO 21H1 64-bit

In which Windows account you have this problem?

A local or Microsoft account without special changes.

Please mention any installed security software

Windows Defender

What version of Sandboxie are you running?

5.53.1/0.9.8b - 5.55.9/1.0.9

Is it a regression?

since 5.53.1/0.9.8b

List of affected browsers

No response

In which sandbox type you have this problem?

In an Application Compartment sandbox with data protection (cyan sandbox icon).

Is the sandboxed program also installed outside the sandbox?

No, it is not installed in the real system.

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No response

Crash dump

No response

Trace log

No response

Sandboxie.ini configuration

No response

Sandboxie-Plus.ini configuration (for Plus interface issues)

No response

DavidXanatos commented 2 years ago

can you provide a download for an affected application so i can reproduce it, you can email it to me directly if you don't want to share it in public

MuddyBleach commented 2 years ago

Oh. These are actually games. They are slightly too heavy for me to upload them now. Several Gbs each. And searching and sharing links to copies of those authentic classic disk versions that may be available anyplace on the web can obviously be of legal concern. I have just experimented with trimming all the resources out of the active game folder thus compacting it to some decent Mbs. Of course, it cannot function in such a state anyway (normally a runtime error). But I am still able to reproduce SBIE 2310 messages with it (context and/or doubleclick start) in a clean sandbox having the latest program build, especially when running a standalone installation of Sandboxie-Classic. It shall be a very poor and unrepresentative material for an investigation though. Or is it yet worth a try?

DavidXanatos commented 2 years ago

I need something that causes the crash than I can debug it. I assume that the issue is that something crashes internaly and teh buffer isn't freed

isaak654 commented 2 years ago

@DavidXanatos Arcania has a free demo available on Steam, you can find a "download demo" button on the right column of this page: https://store.steampowered.com/app/39690/ArcaniA/

Just in case, you can try this one too: https://www.gamepressure.com/download.asp?ID=28435

DavidXanatos commented 2 years ago

perfect!

MuddyBleach commented 2 years ago

So do you agree to take a look at the short sample (only the main executable equipped with necessary dlls and configs)? The malfunction definitely arises before loading resources. It stably produces SBIE 2310 on my rig with 5.53.1 and later and does not at least when started from the context menu.

I doubt if steams version will produce the same effect as the classic disk version because they may have totally different updated executables, Then I only have to buy these games again, this time on Steam, provided each of them is available there at all.

DavidXanatos commented 2 years ago

the steam demo version just crashes in sandboxie without any warning messages. yea email me the link and I'll try to debug the issue

MuddyBleach commented 2 years ago

Just emailed the link to the address indicated in the GitHub profile.

As I said:

When placed (without resource files) in an empty sandbox

Normal behaviour with 5,53.0 (context menu launch). Runtime error. The game would start. The same when started sandboxed from outside the sandbox,

Abnormal behaviour with 5,53.0 (direct launch). SBIE 3210. The game would not start.

For later versions: abnormal behaviour with all Classic builds when launched by any method. Normal behaviour with Plus builds when placed in an empty sandbox and launched from the context menu. Abnormal behaviour with Plus when double-clicked directly in the folder within a sandbox or launched sanboxed via context menu from outside of any sandbox.

linax3-genuine commented 2 years ago

ive posted about having this issue with a game, but only when i try to use mods for it. seems like a wrapper, or an injector type of modding. im not knowledgeable at this, could be wrong. the game runs fine vanilla.

DavidXanatos commented 2 years ago

the main executable does not start it says xapofx1_1.dll is missing

MuddyBleach commented 2 years ago

I updated my previous post with another game demo link: #1597 (comment)

Thank you much for your non-steam Arcania demo link, I also sent to David the link to some another game's files from my personal PC but those of course might have seemed dubious enough for him. Now I have tested the version you proposed. There is the same effect I previously described, However it looks even more odd now. The demo crashes for me without SBIE 2310 messages with any build of Sandboxie when started from the right-click menu just as David reported.

But it launches successfully sometimes with the latest Sandboxie-Plus (no chances at all with Classic) and with Classic up to 5,53,0 when started directly by a double-click. It looks quite random. Except that I see that "Name buffer is approaching overflow" a little less often when the program compatibility is set to "Vista", arcania S Classic arcania SPlus

DavidXanatos commented 2 years ago

okay trying out this one now: https://www.gamepressure.com/download.asp?ID=28435 takes a while to install....

MuddyBleach commented 2 years ago

the main executable does not start it says xapofx1_1.dll is missing

Are you speaking about the Arcania or the Wolverine executable?

That xapofx1_1.dll may belong to the DirectX runtime. I have it installed and in fact I have that library in my system folder.

It sounds like you have no luck to reproduce the SBE 2310 on your machine. But I personally have faced it since a couple of years on at least 3 PCs having totally different hardware, with Win 7, Win 8,1 and Win 10 installed and with different Sandboxie versions. The only detectable pattern is that the newer both the OS version and the Sandboxie version are the more often and persistent these errors become. These still can be bypassed when using previous Sandboxie bulds under the same Win 10 21H1. Perhaps there might be a way to switch on/off that old behaviour in the later ones.

DavidXanatos commented 2 years ago

test.zip Please extract these 2 sbiedll's int your 1.0.10 installation directory and test if this solves the issue for you as well.

It seams that a SECUROM hook was interfering with sandboxies memory allcoation, it should be resolved now.

linax3-genuine commented 2 years ago

it seems like the fix for me came from the mod dll. i downloaded new version. as with the old sandboxie dll, also no errors. i tested it on 1.0.8. i can run the mods with it. used just the 64bit.

MuddyBleach commented 2 years ago

Tested it. Yep, it really seems to be the right way. It works smoothly also sandboxed now with 1,0,10, at least what I have at hand at the moment. Miraculously! Thank you David. The cause is rather surprising., There were official farewell patches for specific titles to remove that obsolete mechanism from boxed editions. So for Arcania. And in particular, this here above is just a demo. That kind of protection is not supposed to be here at all. Moreover, now it seems they even did not disable it properly, both in the demo and in the full release. But no warning, not a slightest mention of it.

linax3-genuine commented 2 years ago

my previous 4am test was useless, so i decided to test your case: installed arcania demo from gamepressure, on sandboxie+ 1.0.8; fail to run, SBIE2310; used the fix; crash SBIE2224; updated to 1.0.10; fail to run, SBIE2310; used the fix; crash SBIE2224; sandbox is emulated admin, no internet, and i did not install the extras from the game(dx,physx,c++).

created new normal sandbox; installing the demo with the default options on fixed sandboxie+ 1.0.10; msiexec.exe(9576): SBIE2205 Service not implemented: SxsInstallW; // 10 messages; finished installation with launch option; Arcania.exe (11708): SBIE2224 CRASH: Arcania.exe;

the fix is working for the SBIE2310, but something else is crashing the program.

DavidXanatos commented 2 years ago

@linax3-genuine I see but the program wasn't runnign on any previous sandboxie version eider? So the fix did not break anything there are just more things to fix?

linax3-genuine commented 2 years ago

what i said in my previous post, is all i know. i have no way to know, if the arcania.exe will crash, if SBIE2310 did not exist. unless i test it outside of sanboxie, which i dont want to do, unless you can suggest me a software, which will clear EVERY trace of that demo.

linax3-genuine commented 2 years ago

i decided to run it outside, it still crashes. Faulting module name: XAudio2_6.dll; Exception code: 0xc0000005;

i can again confirm that the fix is working. and my problem is not related to sanboxie

DavidXanatos commented 2 years ago

great thanks for the testing

MuddyBleach commented 2 years ago

@linax3-genuine Apparently, we have 3 different issues here,

  1. That obscure SBIE 2310 error which was the subject to start the topic and which hopefully will be eliminated in the next builds.
  2. That crash of Arcania Demo which came up occasionaly (the demo was no more than a next best available specimen to test for the issue above) and which might be related to a software incompatibility. Did you try to launch the executable with a compatibility flag ( Win 7, Vista, WinXP etc., can be enabled in the file properties window in the appropriate tab)? That made the trick for me. Also, your setup may have other specific routines or services missing or interferring.
  3. Your further issue with NFS mods which most probably is unrelated to issue 1 and might be related or unrelated to issue 2,
linax3-genuine commented 2 years ago

yes, multiple issues.

in the case of the arcania demo crash, i tried multiple things and i cant resolve that. the faulting module changed to MSVCP90.dll. im looking at the steam release and how many people have issues with it. there are suggested fixes in there.

about nfs and the mods - its fixed, but im not sure how. i altered more than one variable at a time. used the fix and Ultimate ASI Loader and i started with the loader. i tried a bit to reproduce SBIE2310 on 1.0.10 + fix and i failed.