Bug 68197 - Apps mustn’t store data in system folders, such as %SystemDrive% or %WinDir%
Summary: Apps mustn’t store data in system folders, such as %SystemDrive% or %WinDir%
Status: RESOLVED NOTOURBUG
Alias: None
Product: LibreOffice
Classification: Unclassified
Component: Installation (show other bugs)
Version:
(earliest affected)
4.2.0.0.alpha0+ Master
Hardware: Other Windows (All)
: medium normal
Assignee: Not Assigned
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2013-08-16 17:55 UTC by Jesus Corrius
Modified: 2017-08-15 15:50 UTC (History)
3 users (show)

See Also:
Crash report or crash signature:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jesus Corrius 2013-08-16 17:55:13 UTC
Warning: Writing to Windows directory, and or root directories test detected the following errors:

File C:\Windows\SysWOW64\msvcr100.dll was written to an incorrect location.
File C:\Windows\SysWOW64\msvcp100.dll was written to an incorrect location.

Apps mustn’t store data in system folders, such as %SystemDrive% or %WinDir%. Storing app and user data in a system folder can cause access and security problems for the user. Using the Known Folder APIs ensures that you are always able to get to your data.

See link below for more information:

http://msdn.microsoft.com/en-us/library/bb762584(VS.85).aspx
Comment 1 m_a_riosv 2013-08-16 19:11:57 UTC
Hi Jesús,
as I can see in the Details of the files properties:
- msvcp100.dll = Microsoft C Runtime Library
- msvcr100.dll = Microsoft C Runtime Library
what I think are installed by Microsoft C++ Redistributable, needed to run LibreOffice.
Comment 2 Jesus Corrius 2013-08-26 18:41:35 UTC
@Andras:

Hi Andras,

Any comment on this one? I have my theory but I would like to hear it from you :)
Comment 3 Andras Timar 2013-08-26 19:36:09 UTC
(In reply to comment #2)
> @Andras:
> 
> Hi Andras,
> 
> Any comment on this one? I have my theory but I would like to hear it from
> you :)

It is not us, who write into %WinDir%, it is the merge module of Microsoft VC Runtime. Does this mean that bundling runtime libraries via merge modules are not "recommended" any more?
Comment 4 Jesus Corrius 2013-09-03 15:26:59 UTC
I am a little bit worried for one case scenario. 

We install the C runtime libraries using the merge modules. Another third party application detects that they already exist and it doesn't install them. The user uninstalls libreoffice and this third party application doesn't work anymore.
Comment 5 QA Administrators 2015-04-01 14:41:20 UTC Comment hidden (obsolete)
Comment 6 tommy27 2016-04-16 07:23:58 UTC Comment hidden (obsolete)
Comment 7 QA Administrators 2017-05-22 13:24:40 UTC Comment hidden (obsolete)
Comment 8 Timur 2017-08-15 15:50:41 UTC
Title does not reflect discussion and concern is expressed in Comment 4. 
While it's true LO bundles Microsoft C++ Redistributable and removes it on uninstall, listed scenario is not LO issue, so I'll mark as NotOurBug. 
Even with leaving this bug open it's not reasonable to expect a solution for such a scenario. 

If we're speaking about corporate env., my practice is to install C++ Redistributables first, and separately. 
But if there are users who have permission to remove LO they should also undertand C++ Redistributable issue and take responsibility for that.