GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Guard against null or blank path components when adding to module path by stevenebutler · Pull Request #19922 · PowerShell/PowerShell

Conversation

@stevenebutler

@stevenebutler stevenebutler commented Jul 11, 2023 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Contributor

Closes #19875

When MyDocuments folder is blank (e.g. when network drive containing folder is disconnected, or running under local system account) PowerShell crashes on startup. This PR adds some null/blank path checking to strings before they are added to
the module path.

PR Context

PR Checklist

  • PR has a meaningful title
    • Use the present tense and imperative mood when describing your changes
  • Summarized changes
  • Make sure all .h, .cpp, .cs, .ps1 and .psm1 files have the correct copyright header
  • This PR is ready to merge and is not Work in Progress.
    • If the PR is work in progress, please add the prefix WIP: or [ WIP ] to the beginning of the title (the WIP bot will keep its status check at Pending while the prefix is present) and remove the prefix when the PR is ready.
  • Breaking changes
    • None
    • OR
    • Experimental feature(s) needed
      • Experimental feature name(s):
  • User-facing changes
    • Not Applicable
    • OR
    • Documentation needed
      • Issue filed:
  • Testing - New and feature
    • N/A or can only be tested interactively
    • OR
    • Make sure you've added a new test if existing tests do not effectively test the code changed
  • Tooling
    • I have considered the user experience from a tooling perspective and don't believe tooling will be impacted.
    • OR
    • I have considered the user experience from a tooling perspective and opened an issue in the relevant tool repository. This may include:
      • Impact on PowerShell Editor Services which is used in the PowerShell extension for VSCode
        (which runs in a different PS Host).
        • Issue filed:
      • Impact on Completions (both in the console and in editors) - one of PowerShell's most powerful features.
        • Issue filed:
      • Impact on PSScriptAnalyzer (which provides linting & formatting in the editor extensions).
        • Issue filed:
      • Impact on EditorSyntax (which provides syntax highlighting with in VSCode, GitHub, and many other editors).
        • Issue filed:

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

crlogic reacted with thumbs up emoji
All reactions
  • 👍 1 reaction
@stevenebutler
Guard against null when adding path components
03d51bd
@pull-request-quantifier-deprecated pull-request-quantifier-deprecated Bot added the Extra Small label Jul 11, 2023
@ghost ghost assigned Aditya Patwardhan (adityapatwardhan) Jul 11, 2023
@microsoft-github-policy-service microsoft-github-policy-service Bot assigned Dongbo Wang (daxian-dbw), Ilya (iSazonov), Patrick Meinecke (SeeminglyScience) and Travis Plunk (TravisEz13) Jul 11, 2023
@stevenebutler stevenebutler mentioned this pull request Jul 11, 2023
PowerShell 7.4.0-preview.4 fails to start on Windows PC when disconnected from domain network #19875
Closed
5 tasks done
@stevenebutler stevenebutler changed the title Guard against null when adding path components Guard against null or blank path components when adding to module path Jul 11, 2023
@StevenBucher98 Steven Bucher (StevenBucher98) added the PowerShell-Docs not needed The PR was reviewed and doesn't appear to require a PowerShell Docs update label Jul 17, 2023
JamesWTruher
James Truher (JamesWTruher) suggested changes Jul 17, 2023
View reviewed changes

@JamesWTruher James Truher (JamesWTruher) left a comment

Copy link
Copy Markdown
Collaborator

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

please add some validation for this new behavior

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@microsoft-github-policy-service microsoft-github-policy-service Bot added the Waiting on Author The PR was reviewed and requires changes or comments from the author before being accept label Jul 17, 2023
@stevenebutler

stevenebutler commented Jul 18, 2023

Copy link
Copy Markdown
Contributor Author

please add some validation for this new behavior

James Truher (@JamesWTruher) - the bug was caused by unexpected return data from this API call in ModuleIntrinsics.cs

string myDocumentsPath = Environment.GetFolderPath(Environment.SpecialFolder.MyDocuments);

To add tests for this in the build we'd either have to have the ability to run under an account where it returns "" or provide some way to simulate the API returning the empty string (e.g. through a layer of indirection controlled by an environment variable). Is this something you'd like to see, or if you have an alternative approach please let me know.

The easiest way I've found to test the impact of this change manually is to use psexec from SysInternals to launch a System account (elevated) command prompt (which returns "" for the API call above). See issue #19875 comments for some screenshots from that testing.

psexec -i -s cmd.exe

Then in the system account elevated command prompt start the pwsh executable and observe:

  • pwsh-7.4-preview 4 crashes with null pointer exception when starting
  • with this PR it starts successfully

I have also tested it manually in the scenario where a domain joined PC with network located MyDocuments is disconnected from the domain network and confirmed it no longer crashes in that scenario either.

I'm not familiar enough with the build environment to know how such a test could be orchestrated. The only alternative would be to use some interfaces and create some C# unit tests but I haven't seen any unit test projects in the source base so don't know if this would be an acceptable approach here.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@microsoft-github-policy-service microsoft-github-policy-service Bot removed the Waiting on Author The PR was reviewed and requires changes or comments from the author before being accept label Jul 18, 2023
@iSazonov

Ilya (iSazonov) commented Jul 18, 2023 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Collaborator

stevenebutler Easiest way is to use a test hook. See

PowerShell/src/System.Management.Automation/engine/Utils.cs

Line 1532 in 5595072

public static class InternalTestHooks

PowerShell/test/powershell/Host/HostUtilities.Tests.ps1

Line 74 in 5595072

[System.Management.Automation.Internal.InternalTestHooks]::SetTestHook('NoPromptForPassword', $true)

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@stevenebutler

stevenebutler commented Jul 18, 2023

Copy link
Copy Markdown
Contributor Author

stevenebutler Easiest way is to use a test hook. See

PowerShell/src/System.Management.Automation/engine/Utils.cs

Line 1532 in 5595072

public static class InternalTestHooks

PowerShell/test/powershell/Host/HostUtilities.Tests.ps1

Line 74 in 5595072

[System.Management.Automation.Internal.InternalTestHooks]::SetTestHook('NoPromptForPassword', $true)

The issue is the test hook would have to be configured before powershell starts up to trigger the bug because this crash happens long before you get an interactive shell or can run a script. It happens while PowerShell itself is initializing.

Maybe we can start up PowerShell then tweak the test hook and call into the method that crashes in the module intrinsics code and possibly trigger the same exception afterPowerShell has started. I'll look into that possibility.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@iSazonov

Ilya (iSazonov) commented Jul 18, 2023

Copy link
Copy Markdown
Collaborator

The issue is the test hook would have to be configured before powershell starts up to trigger the bug because this crash happens long before you get an interactive shell or can run a script. It happens while PowerShell itself is initializing.

We could use specific/hidden env variable like __SuppressAnsiEscapeSequences or __PWSH_LOGIN_CHECKED for turning on the test hook.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@stevenebutler
Add test for blank MyDocuments path
2607949
@pull-request-quantifier-deprecated

pull-request-quantifier-deprecated Bot commented Jul 19, 2023

Copy link
Copy Markdown

This PR has 30 quantified lines of changes. In general, a change size of upto 200 lines is ideal for the best PR experience!


Quantification details

Label      : Extra Small
Size       : +21 -9
Percentile : 12%

Total files changed: 3

Change summary by file extension:
.cs : +12 -9
.ps1 : +9 -0

Change counts above are quantified counts, based on the PullRequestQuantifier customizations.

Why proper sizing of changes matters

Optimal pull request sizes drive a better predictable PR flow as they strike a
balance between between PR complexity and PR review overhead. PRs within the
optimal size (typical small, or medium sized PRs) mean:

  • Fast and predictable releases to production:
    • Optimal size changes are more likely to be reviewed faster with fewer
      iterations.
    • Similarity in low PR complexity drives similar review times.
  • Review quality is likely higher as complexity is lower:
    • Bugs are more likely to be detected.
    • Code inconsistencies are more likely to be detected.
  • Knowledge sharing is improved within the participants:
    • Small portions can be assimilated better.
  • Better engineering practices are exercised:
    • Solving big problems by dividing them in well contained, smaller problems.
    • Exercising separation of concerns within the code changes.

What can I do to optimize my changes

  • Use the PullRequestQuantifier to quantify your PR accurately
    • Create a context profile for your repo using the context generator
    • Exclude files that are not necessary to be reviewed or do not increase the review complexity. Example: Autogenerated code, docs, project IDE setting files, binaries, etc. Check out the Excluded section from your prquantifier.yaml context profile.
    • Understand your typical change complexity, drive towards the desired complexity by adjusting the label mapping in your prquantifier.yaml context profile.
    • Only use the labels that matter to you, see context specification to customize your prquantifier.yaml context profile.
  • Change your engineering behaviors
    • For PRs that fall outside of the desired spectrum, review the details and check if:
      • Your PR could be split in smaller, self-contained PRs instead
      • Your PR only solves one particular issue. (For example, don't refactor and code new features in the same PR).

How to interpret the change counts in git diff output

  • One line was added: +1 -0
  • One line was deleted: +0 -1
  • One line was modified: +1 -1 (git diff doesn't know about modified, it will
    interpret that line like one addition plus one deletion)
  • Change percentiles: Change characteristics (addition, deletion, modification)
    of this PR in relation to all other PRs within the repository.


Was this comment helpful? 👍  :ok_hand:  :thumbsdown: (Email)
Customize PullRequestQuantifier for this repository.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@stevenebutler

stevenebutler commented Jul 19, 2023

Copy link
Copy Markdown
Contributor Author

It's not necessary to use env vars as the code that was failing can be called directly after startup with the test hook set to fake an empty MyDocuments location.

I've added this test, which failed without the patch.

      try {
            [System.Management.Automation.Internal.InternalTestHooks]::SetTestHook('SetMyDocumentsSpecialFolderToBlank', $true)
            [System.Management.Automation.ModuleIntrinsics]::GetModulePath($null, $null, $null)
        }
        finally {
            [System.Management.Automation.Internal.InternalTestHooks]::SetTestHook('SetMyDocumentsSpecialFolderToBlank', $false)
        }
iSazonov and TravisEz13 reacted with thumbs up emoji
All reactions
  • 👍 2 reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

TravisEz13
Travis Plunk (TravisEz13) requested changes Jul 24, 2023
View reviewed changes

@TravisEz13 Travis Plunk (TravisEz13) left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

blocking for security review

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@microsoft-github-policy-service microsoft-github-policy-service Bot added the Waiting on Author The PR was reviewed and requires changes or comments from the author before being accept label Jul 24, 2023
@TravisEz13 Travis Plunk (TravisEz13) added the WG-Security security related areas such as JEA label Jul 24, 2023
TravisEz13
Travis Plunk (TravisEz13) reviewed Jul 24, 2023
View reviewed changes

@TravisEz13 Travis Plunk (TravisEz13) left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it's good.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
TravisEz13
Travis Plunk (TravisEz13) approved these changes Jul 24, 2023
View reviewed changes

@TravisEz13 Travis Plunk (TravisEz13) left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reviewed with WG-Security and we don't have any concerns

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@daxian-dbw

Dongbo Wang (daxian-dbw) commented Jul 24, 2023

Copy link
Copy Markdown
Member

James Truher (@JamesWTruher) Can you please take another look and update your review? Thanks!

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

JamesWTruher
James Truher (JamesWTruher) approved these changes Jul 31, 2023
View reviewed changes

@JamesWTruher James Truher (JamesWTruher) left a comment

Copy link
Copy Markdown
Collaborator

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks!

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@daxian-dbw
Dongbo Wang (daxian-dbw) merged commit 3710671 into PowerShell:master Jul 31, 2023
@daxian-dbw Dongbo Wang (daxian-dbw) added CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log and removed Waiting on Author The PR was reviewed and requires changes or comments from the author before being accept labels Jul 31, 2023
@daxian-dbw Dongbo Wang (daxian-dbw) added CL-Engine Indicates that a PR should be marked as an engine change in the Change Log and removed CL-General Indicates that a PR should be marked as a general cmdlet change in the Change Log labels Aug 1, 2023
@stevenebutler
stevenebutler deleted the 19875-prevent-startup-crash-when-personalModulePath-is-blank-or-null branch January 4, 2024 21:26
Thatgfsj (Thatgfsj) pushed a commit to Thatgfsj-contribs/PowerShell that referenced this pull request Aug 6, 2026
@stevenebutler
Guard against null or blank path components when adding to module p…
cf69e61
…ath (PowerShell#19922)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@TravisEz13 Travis Plunk (TravisEz13) TravisEz13 approved these changes
+1 more reviewer
@JamesWTruher James Truher (JamesWTruher) JamesWTruher approved these changes
Reviewers whose approvals may not affect merge requirements

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@daxian-dbw Dongbo Wang (daxian-dbw)

@TravisEz13 Travis Plunk (TravisEz13)

@adityapatwardhan Aditya Patwardhan (adityapatwardhan)

@iSazonov Ilya (iSazonov)

@SeeminglyScience Patrick Meinecke (SeeminglyScience)

Labels

CL-Engine Indicates that a PR should be marked as an engine change in the Change Log Extra Small PowerShell-Docs not needed The PR was reviewed and doesn't appear to require a PowerShell Docs update WG-Security security related areas such as JEA

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

PowerShell 7.4.0-preview.4 fails to start on Windows PC when disconnected from domain network

Uh oh!

There was an error while loading. Please reload this page.

8 participants

@stevenebutler @iSazonov @daxian-dbw @JamesWTruher @TravisEz13 @adityapatwardhan @StevenBucher98 @SeeminglyScience
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.