Code intergrity diagnostics (#3729)

MicrosoftEdge · Aug 23, 2023 · 113585d · 113585d
1 parent e7cbc9b
commit 113585d
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 1 deletion.
diff --git a/diagnostics/README.md b/diagnostics/README.md
@@ -5,4 +5,5 @@ This folder contains directions for gathering various detailed diagnostics/logs
 - [ETW Trace](etw.md): Event Tracing for Windows (ETW) traces include detailed events on system state and the activities WV2 was doing before and when an issue occurs.
 - [Installer Logs](install.md): Installer logs include information about any errors that WV2's installer/updater hit when trying to install or update the WV2 runtime.
 - [GPU Info](gpu.md): GPU logs include details on the user's GPU and any potential graphics or rendering issues.
-- [Network Logs](network.md): Network logs include the network requests, responses, and details on any errors when loading files.
+- [Network Logs](network.md): Network logs include the network requests, responses, and details on any errors when loading files.
+- [Code Integrity](code_integrity.md): how to root cause STATUS_INVALID_IMAGE_HASH errors.
diff --git a/diagnostics/code_integrity.md b/diagnostics/code_integrity.md
@@ -0,0 +1,28 @@
+# Code Integrity in WebView2
+
+## Why it is important
+Code integrity is a feature of Windows that verifies the authenticity and integrity of the code that runs on your system. It helps protect your system from malware, tampering, and unauthorized changes. Code integrity checks the digital signatures of the files that are loaded into memory, and prevents any file that does not have a valid signature from running in webview2.
+
+## Symptoms
+Child process failed with kind COREWEBVIEW2_PROCESS_FAILED_KIND_RENDER_PROCESS_EXITED
+and exit code -1073740760 or STATUS_INVALID_IMAGE_HASH.
+
+Users may see error page in the WebView2:
+
+![Compatibility problem](compatibility_problem.png)
+
+## Identify the dll
+
+**Compatibility problem** web page may show the culprit file otherwise use Event Viewer.
+
+Open Event Viewer by typing eventvwr in the search box on the taskbar and selecting the app.
+
+ - In the left pane, expand Windows Logs and click on System.
+ - In the right pane, click on Filter Current Log.
+ - In the Filter tab, under Event sources, select Microsoft-Windows-CodeIntegrity and click on OK.
+ - You will see a list of events related to code integrity – search for the ones with msedgewebview2.exe process.
+ - The file name and path of the file that caused the code integrity violation are shown in the message.
+
+
+
+
diff --git a/diagnostics/compatibility_problem.png b/diagnostics/compatibility_problem.png