canmove, Confirmed users
1,220
edits
Reviews/B2G/AppUpdates: Difference between revisions
Jump to navigation
Jump to search
→Threat Analysis
Ptheriault (talk | contribs) No edit summary |
Ptheriault (talk | contribs) |
||
| Line 84: | Line 84: | ||
* App isn't updated in a timely manner | * App isn't updated in a timely manner | ||
** what could cause the initial update check to fail? | ** what could cause the initial update check to fail? | ||
*** What about if the update manifest is accidentally included in an appcache? | *** What about if the update manifest is accidentally included in an appcache? Not an issue, since Gecko does the retrieval of the manifest, so appcache doesn't apply. | ||
*** Other possible DoS scenarios? Version number corruption? | *** Are there Other possible DoS scenarios? Version number corruption? Apps are updated if the previous manifest hash doesn't match the one which is retrived as part of the update check. So no issue. | ||
* Unsigned update gets applied? | * Unsigned update gets applied? | ||
| Line 91: | Line 91: | ||
* Wrong app gets updated? | * Wrong app gets updated? | ||
** Currently a compromised process could spoof the input parameter to | ** "Currently a compromised process could spoof the input parameter to Webapps:CheckForUpdate message. See [https://mxr.mozilla.org/mozilla-central/source/dom/apps/src/Webapps.js#455 here]. However the supplied appid (oid) paramemeter doesn't appear to be used in the parent (webapps.jsm) . So an app could trigger an update for another app, but not cause a mismatch. | ||
* Partial update makes app unusable | * Partial update makes app unusable | ||
** Can an app be half updated? | ** Can an app be half updated? | ||
*** Hosted App with Appcache? | |||
* App | *** Packaged apps: what happens in case of running out of diskspace which applying an update? | ||
** | |||
* Signed update gets applied to the wrong app? | * Signed update gets applied to the wrong app? | ||
| Line 103: | Line 102: | ||
* An old update get applied (perhaps introducing a security vulnerability) | * An old update get applied (perhaps introducing a security vulnerability) | ||
==Links== | ==Links== | ||