Screen Capture Program Crashes

TooYoungTooSimp commented 2 years ago

Describe what you noticed and did

Install Tencent Meeting (wemeet, assuming version 3.5.6 as the higher version refuses to start, but older versions have the same problem too)

Join or start a conference

Share Desktop

Then, WeMeet crashed with an image

How often did you encounter it so far?

Everytime

Affected program

Tencent Meeting

Download link

https://updatecdn.meeting.qq.com/cos/8d470eda782890abc7cc8cc3c2629cb3/TencentMeeting_0300000000_3.5.6.416.publish.exe

Where is the program located?

The program is installed only inside a sandbox (NOT in the real system anyway).

Expected behavior

Desktop sharing should not crash

What is your Windows edition and version?

Windows 10 Pro 21H2 19044.1806

In which Windows account you have this problem?

I use the built-in Administrator with Admin Approval Mode turned on.

Please mention any installed security software

No, even Windows Defender is disabled.

What version of Sandboxie are you running?

Sandboxie Classic 5.57.0 (older box same problem)

Is it a new installation of Sandboxie?

I have been in the same version for a while now.

Is it a regression?

No response

In which sandbox type you have this problem?

In a Standard isolation sandbox (yellow sandbox icon).

Can you reproduce this problem on an empty sandbox?

I can confirm it also on an empty sandbox.

Did you previously enable some security policy settings outside Sandboxie?

No

Crash dump

https://github.com/sandboxie-plus/Sandboxie/files/9046215/Tencent.zip

Trace log

No response

Sandboxie.ini configuration

[GlobalSettings]
Template=Edge_Win11Fix
Template=OfficeClickToRun
Template=7zipShellEx
Template=WindowsRasMan
Template=SynapticsTouchPad
Template=WindowsLive
Template=OfficeLicensing
FileRootPath=E:\Sandbox\%USER%\%SANDBOX%
FakeAdminRights=n

[UserSettings_4BC00582]
SbieCtrl_UserName=administrator
SbieCtrl_NextUpdateCheck=1657625041
SbieCtrl_EnableLogonStart=y
SbieCtrl_EnableAutoStart=y
SbieCtrl_AddDesktopIcon=n
SbieCtrl_AddQuickLaunchIcon=n
SbieCtrl_AddContextMenu=y
SbieCtrl_AddSendToMenu=y
SbieCtrl_AutoApplySettings=n
SbieCtrl_WindowCoords=304,125,880,460
SbieCtrl_ActiveView=40021
SbieCtrl_HideWindowNotify=n
SbieCtrl_HideMessage=2205,WMI IWbemServices 19
SbieCtrl_HideMessage=2203,*GUIPROXY
SbieCtrl_UpdateCheckNotify=n
SbieCtrl_BoxExpandedView=DefaultBox,TempBox,TencentBox

[TencentBox]
Enabled=y
ConfigLevel=9
AutoRecover=n
Template=OpenSmartCard
Template=OpenBluetooth
Template=SkipHook
Template=FileCopy
Template=qWave
Template=BlockPorts
Template=LingerPrograms
Template=AutoRecoverIgnore
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
RecoverFolder=%Personal%
RecoverFolder=%Desktop%
BorderColor=#00FFFF,ttl,6
ClosedFilePath=%TEMP%\Tencent\WeMeet\Temp\

TooYoungTooSimp commented 2 years ago

I record a video to reproduce what I actually did

https://user-images.githubusercontent.com/6648049/177326500-cb447514-450b-4aea-a658-cdae83461ad2.mp4

6Tom commented 1 year ago

Yes, you are right. Wemeet has a greater chance of crashing directly as long as it shares the screen. When I need to share the screen, I often use windows sandbox or vmware virtual machine.
And now tencent added anti sandboxie measures after wemeet version 3.6.6. If you don't use the method I mentioned here#1842 , you can't even run it.

If you have a better way to run it, please tell me, which will be appreciated.
Hate tencent so much. What a rogue company. Who the hell is going to install these rogue software in the computer.

By the way, I really appreciate all the contributors of sandboxie project and Github open source community. I can't even imagine whether the "Nanshan Pizza Hut" will sue if this project is in Gitee.

6Tom commented 1 year ago

Oh, by the way, I noticed this entry in your sandbox "TencentBox": ClosedFilePath=%TEMP%\Tencent\WeMeet\Temp\

You cannot block the auto update of wemeet by blocking the generation of this directory.

Otherwise, once you join a meetng, your wemeet will crash at uncertain intervals. Because in addition to storing auto update files, this directory will also store some other files during the meeting.

At present, it seems that there is no way to block incremental updates of some minor versions. However, every time a major version is updated, it needs to download the entire new installation package, which can be blocked through hosts: 0.0.0.0 updatecdn.meeting.qq.com

cxw620 commented 1 year ago

If I directly install wemeet and add Force Programs, I can run wemeet in sandbox, but it often crashed unexpectedly. I try to install it in direcctly in sandbox, but I can't even run it. https://github.com/sandboxie-plus/Sandboxie/issues/1842#issuecomment-1291975271 does work.

Later any more later action on solving such problem? How can we trick an app into thinking it's running on a real device?

6Tom commented 1 year ago

Later any more later action on solving such problem? How can we trick an app into thinking it's running on a real device?

Yes, I also want to know.

monetjoe commented 2 weeks ago

This issue links to #1842 , we are now still sufferring from installing wemeet out of sandboxies...

I tried sharing full screen and selected region, they both lead to crash.... However, sharing blank board works well...

sandboxie-plus / Sandboxie