[tbb-bugs] #22041 [Applications/Tor Browser]: libmozsandbox.so error on Debian jessie amd64 after upgrading to 7.0a3

[Tor Bug Tracker & Wiki]

#22041: libmozsandbox.so error on Debian jessie amd64 after upgrading to 7.0a3
-------------------------------------------------+-------------------------
 Reporter:  dcf                                  |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Very High                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Critical                             |     Resolution:
 Keywords:  ff52-esr, tbb-7.0-must-alpha,        |  Actual Points:
  TorBrowserTeam201704R                          |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by mcs):

 * keywords:  ff52-esr, tbb-7.0-must-alpha, TorBrowserTeam201704 =>
     ff52-esr, tbb-7.0-must-alpha, TorBrowserTeam201704R
 * status:  assigned => needs_review


Comment:

 Here is a patch for review:
  https://gitweb.torproject.org/user/brade/tor-
 browser.git/commit/?h=bug22041-01&id=b1dd51db5d8489b67a47344dbcffe21aaa083378

 The main problem was a botched test of the `lstat` return value.
 Embarrassingly, it appears that this bug has been present since we first
 added symlink support to the updater (a long time ago). Kathy and I
 believe the impact is relatively low because most Linux and OSX users have
 not turned off staged updates plus made changes to the browser
 installation. Another way to look at it is that no one reported a bug
 until now.

 Users who experienced this bug may have several `.moz-backup` files under
 their `Browser/` directory, but after a full update is successfully
 applied the backup files will be removed. If they have `.moz-backup` files
 and successfully apply an incremental update they may have some backup
 files left, but they will tend to be deleted over time (as files are
 patched for each new release).

 Since we cannot patch the updater programs that have already been
 released, we have to live with this bug for one more update.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22041#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online