Hm, good question. What I'd start doing is looking at the ~/.cache/chromium and ~/.config/chromium snapshots, making copies, and then trying to run chromium with random stuff deleted.

For example, on my system I have ~/.cache/chromium/Profile 1/old_Cache_000 and ~/.cache/chromium/System Profile/Code Cache and ~/.cache/chromium/Profile 1/Cache/Cache_Data/. So I'd start by deleting old_Cache_000 and seeing if it still crashes. If it does, I'd get rid of the Code Cache as well. If it doesn't still crash, I'd copy Code Cache back over and then try deleting Cache_Data. If that directory is needed to get it to crash, I'd try deleting files within that directory until I had a minimal number of files that still cause the crash. I'd do the same for my ~/.config/chromium directory, too.

Once you have a minimal snapshot, you can look at the individual items in the snapshot to see if any sensitive work info is in there. If it's just, say, internal gitlab urls and pages that don't have proprietary details of your workplace, then maybe you could file a bug and include a tarball with those. If it does include sensitive data, then either it's time to give up or you could try editing the cache/config files to try and replace the details in the file. Eg, if the cache has the code name of some unreleased product, you might be able to just change the string from "Seckrit name" to "foobar1 name" and see if it still crashes.

I don't know how chromium will behave with only half a cache, but it would be good to do a sanity check every once in a while by (again, after making a backup copy) starting chromium with -g to ensure it repairs itself and runs like with your full cache snapshot.


On 4/18/22 03:49, Anthony Callegaro wrote:
Hey Andres,

I do have a copy of the crashing Chromium profile but this is my professional 
one. And though I would love to help discovering a security bug in Chromium, I 
work in a security sensitive environment and wouldn't be able to share it 
without finding a way of selectively removing things from cache.

Do you know if that's even possible ?

Take care
LeTic

Reply via email to