Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issues with media playback in Firefox #3

Open
n-zhi opened this issue Oct 13, 2021 · 1 comment · Fixed by n-zhi/exploitguard#1 · May be fixed by #5
Open

Issues with media playback in Firefox #3

n-zhi opened this issue Oct 13, 2021 · 1 comment · Fixed by n-zhi/exploitguard#1 · May be fixed by #5

Comments

@n-zhi
Copy link

n-zhi commented Oct 13, 2021

Hello, it seems that recently any media (audio&video) playback in Firefox became broken with exploit guard settings provided in this repository.
I checked that any of these options trigger this behavior:

EnableExportAddressFilter
EnableExportAddressFilterPlus
EnableImportAddressFilter
EnableRopStackPivot
EnableRopCallerCheck
EnableRopSimExec

So working settings are
Set-ProcessMitigation -Name firefox.exe -Enable DEP,BottomUp,ForceRelocateImages,CFG,AuditRemoteImageLoads,AuditLowLabelImageLoads,SEHOP,TerminateOnError,AuditChildProcess

Checked in Firefox 93.0 x64 and Windows 10 19043.1237

@n-zhi
Copy link
Author

n-zhi commented Dec 5, 2021

It seems that almost all of these are working again in Firefox 94.0.2:

EnableExportAddressFilter
EnableImportAddressFilter
EnableRopStackPivot
EnableRopCallerCheck
EnableRopSimExec

But "EnableExportAddressFilterPlus" rule is now crashing Firefox all the time just on startup.

Working settings are:
Set-ProcessMitigation -Name firefox.exe -Enable DEP,BottomUp,ForceRelocateImages,CFG,AuditRemoteImageLoads,AuditLowLabelImageLoads,EnableExportAddressFilter,EnableImportAddressFilter,EnableRopStackPivot,EnableRopCallerCheck,EnableRopSimExec,SEHOP,TerminateOnError,AuditChildProcess

Firefox 94.0.2 x64, Windows 10 19043.1348

n-zhi added a commit to n-zhi/exploitguard that referenced this issue Dec 5, 2021
@n-zhi n-zhi reopened this Dec 5, 2021
@n-zhi n-zhi linked a pull request Dec 5, 2021 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant