131868 2014-04-18 17:22:45 -0700 Don't allow app sandboxed apps without the network client entitlement to launch the network process 2014-04-19 22:57:44 -0700 1 1 1 Unclassified WebKit New Bugs 528+ (Nightly build) Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 andersca andersca mitz oldest_to_newest 1002083 0 andersca 2014-04-18 17:22:45 -0700 Don't allow app sandboxed apps without the network client entitlement to launch the network process 1002087 1 229689 andersca 2014-04-18 17:27:24 -0700 Created attachment 229689 Patch 1002091 2 andersca 2014-04-18 17:34:10 -0700 Committed r167521: <http://trac.webkit.org/changeset/167521> 229689 2014-04-18 17:27:24 -0700 2014-04-18 17:31:57 -0700 Patch bug-131868-20140418172703.patch text/plain 7078 andersca U3VidmVyc2lvbiBSZXZpc2lvbjogMTY3NTA3CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0Mi9D aGFuZ2VMb2cgYi9Tb3VyY2UvV2ViS2l0Mi9DaGFuZ2VMb2cKaW5kZXggYTRjN2U2ZjJmZmE2MjEw MmNmMjZlNGYxZGM4OWQ3ZTQ2Njg2YTM0Yy4uZDY0M2U0NzNjZjY0ZDI3NzI2NjQxY2RiNjY5MTk4 NjYxZGIxNWQ2YSAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdDIvQ2hhbmdlTG9nCisrKyBiL1Nv dXJjZS9XZWJLaXQyL0NoYW5nZUxvZwpAQCAtMSw1ICsxLDMzIEBACiAyMDE0LTA0LTE4ICBBbmRl cnMgQ2FybHNzb24gIDxhbmRlcnNjYUBhcHBsZS5jb20+CiAKKyAgICAgICAgRG9uJ3QgYWxsb3cg YXBwIHNhbmRib3hlZCBhcHBzIHdpdGhvdXQgdGhlIG5ldHdvcmsgY2xpZW50IGVudGl0bGVtZW50 IHRvIGxhdW5jaCB0aGUgbmV0d29yayBwcm9jZXNzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD0xMzE4NjgKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzEy MzU0MTg4PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg ICogTmV0d29ya1Byb2Nlc3MvRW50cnlQb2ludC9tYWMvWFBDU2VydmljZS9OZXR3b3JrU2Vydmlj ZUVudHJ5UG9pbnQubW06CisgICAgICAgIChXZWJLaXQ6Ok5ldHdvcmtTZXJ2aWNlSW5pdGlhbGl6 ZXJEZWxlZ2F0ZTo6TmV0d29ya1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlKToKKyAgICAgICAg QWRkIGEgbmV3IGRlbGVnYXRlIHRoYXQgaW1wbGVtZW50cyBjaGVja0VudGl0bGVtZW50cygpLgor CisgICAgICAgIChOZXR3b3JrU2VydmljZUluaXRpYWxpemVyKToKKyAgICAgICAgUGFzcyB0aGUg bmV3IGRlbGVnYXRlIHRvIFhQQ1NlcnZpY2VJbml0aWFsaXplci4KKworICAgICAgICAqIFNoYXJl ZC9FbnRyeVBvaW50VXRpbGl0aWVzL21hYy9YUENTZXJ2aWNlL1hQQ1NlcnZpY2VFbnRyeVBvaW50 Lmg6CisgICAgICAgICogU2hhcmVkL0VudHJ5UG9pbnRVdGlsaXRpZXMvbWFjL1hQQ1NlcnZpY2Uv WFBDU2VydmljZUVudHJ5UG9pbnQubW06CisgICAgICAgIENhbGwgY2hlY2tFbnRpdGxlbWVudHMu CisKKyAgICAgICAgKFdlYktpdDo6WFBDU2VydmljZUluaXRpYWxpemVyRGVsZWdhdGU6OmNoZWNr RW50aXRsZW1lbnRzKToKKyAgICAgICAgUmV0dXJuIHRydWUuCisKKyAgICAgICAgKFdlYktpdDo6 WFBDU2VydmljZUluaXRpYWxpemVyRGVsZWdhdGU6Omhhc0VudGl0bGVtZW50KToKKyAgICAgICAg SGVscGVyIGZ1bmN0aW9uIHRoYXQgcmV0dXJucyB3aGV0aGVyIGEgY2xpZW50IGhhcyB0aGUgZ2l2 ZW4gZW50aXRsZW1lbnQuCisKKyAgICAgICAgKFdlYktpdDo6WFBDU2VydmljZUluaXRpYWxpemVy RGVsZWdhdGU6OmlzQ2xpZW50U2FuZGJveGVkKToKKyAgICAgICAgSGVscGVyIGZ1bmN0aW9uIHRo YXQgY2hlY2tzIHdoZXRoZXIgdGhlIGNsaWVudCBpcyBzYW5kYm94ZWQuCisKKzIwMTQtMDQtMTgg IEFuZGVycyBDYXJsc3NvbiAgPGFuZGVyc2NhQGFwcGxlLmNvbT4KKwogICAgICAgICBBZGRyZXNz IGEgY291cGxlIG9mIHJldmlldyBjb21tZW50cwogICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0 Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MTMxODU2CiAKZGlmZiAtLWdpdCBhL1NvdXJjZS9XZWJLaXQy L05ldHdvcmtQcm9jZXNzL0VudHJ5UG9pbnQvbWFjL1hQQ1NlcnZpY2UvTmV0d29ya1NlcnZpY2VF bnRyeVBvaW50Lm1tIGIvU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvRW50cnlQb2ludC9t YWMvWFBDU2VydmljZS9OZXR3b3JrU2VydmljZUVudHJ5UG9pbnQubW0KaW5kZXggZTZjOTMyNjE5 OWVmYjk0YjZmNjJlZWEwODhmMzQxNWM0OWE5NjRkZC4uZjUyMjg1MTczZDZhNGY0NGRjM2NlYjA5 ZjU2MmU5YmY0MzA0MjlkZiAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nl c3MvRW50cnlQb2ludC9tYWMvWFBDU2VydmljZS9OZXR3b3JrU2VydmljZUVudHJ5UG9pbnQubW0K KysrIGIvU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvRW50cnlQb2ludC9tYWMvWFBDU2Vy dmljZS9OZXR3b3JrU2VydmljZUVudHJ5UG9pbnQubW0KQEAgLTMwLDYgKzMwLDM0IEBACiAjaW1w b3J0ICJXS0Jhc2UuaCIKICNpbXBvcnQgIlhQQ1NlcnZpY2VFbnRyeVBvaW50LmgiCiAKK25hbWVz cGFjZSBXZWJLaXQgeworCitjbGFzcyBOZXR3b3JrU2VydmljZUluaXRpYWxpemVyRGVsZWdhdGUg OiBwdWJsaWMgWFBDU2VydmljZUluaXRpYWxpemVyRGVsZWdhdGUgeworcHVibGljOgorICAgIE5l dHdvcmtTZXJ2aWNlSW5pdGlhbGl6ZXJEZWxlZ2F0ZSh4cGNfY29ubmVjdGlvbl90IGNvbm5lY3Rp b24sIHhwY19vYmplY3RfdCBpbml0aWFsaXplck1lc3NhZ2UpCisgICAgICAgIDogWFBDU2Vydmlj ZUluaXRpYWxpemVyRGVsZWdhdGUoY29ubmVjdGlvbiwgaW5pdGlhbGl6ZXJNZXNzYWdlKQorICAg IHsKKyAgICB9CisKKyNpZiBQTEFURk9STShNQUMpCisgICAgdmlydHVhbCBib29sIGNoZWNrRW50 aXRsZW1lbnRzKCkgb3ZlcnJpZGUKKyAgICB7CisgICAgICAgIGlmICghaXNDbGllbnRTYW5kYm94 ZWQoKSkKKyAgICAgICAgICAgIHJldHVybiB0cnVlOworCisgICAgICAgIGlmICghaGFzRW50aXRs ZW1lbnQoImNvbS5hcHBsZS5zZWN1cml0eS5uZXR3b3JrLmNsaWVudCIpKSB7CisgICAgICAgICAg ICBOU0xvZyhAIkFwcGxpY2F0aW9uIGRvZXMgbm90IGhhdmUgdGhlICdjb20uYXBwbGUuc2VjdXJp dHkubmV0d29yay5jbGllbnQnIGVudGl0bGVtZW50LiIpOworICAgICAgICAgICAgcmV0dXJuIGZh bHNlOworICAgICAgICB9CisKKyAgICAgICAgcmV0dXJuIHRydWU7CisgICAgfQorI2VuZGlmCisK K307CisKK30gLy8gbmFtZXNwYWNlIFdlYktpdAorCiB1c2luZyBuYW1lc3BhY2UgV2ViS2l0Owog CiBleHRlcm4gIkMiIFdLX0VYUE9SVCB2b2lkIE5ldHdvcmtTZXJ2aWNlSW5pdGlhbGl6ZXIoeHBj X2Nvbm5lY3Rpb25fdCBjb25uZWN0aW9uLCB4cGNfb2JqZWN0X3QgaW5pdGlhbGl6ZXJNZXNzYWdl KTsKQEAgLTQxLDYgKzY5LDYgQEAgdm9pZCBOZXR3b3JrU2VydmljZUluaXRpYWxpemVyKHhwY19j b25uZWN0aW9uX3QgY29ubmVjdGlvbiwgeHBjX29iamVjdF90IGluaXRpYWwKICAgICAvLyB0aGUg dGhpcyBwcm9jZXNzIGRvbid0IHRyeSB0byBpbnNlcnQgdGhlIHNoaW0gYW5kIGNyYXNoLgogICAg IEVudmlyb25tZW50VXRpbGl0aWVzOjpzdHJpcFZhbHVlc0VuZGluZ1dpdGhTdHJpbmcoIkRZTERf SU5TRVJUX0xJQlJBUklFUyIsICIvU2VjSXRlbVNoaW0uZHlsaWIiKTsKIAotICAgIFhQQ1NlcnZp Y2VJbml0aWFsaXplcjxOZXR3b3JrUHJvY2VzcywgWFBDU2VydmljZUluaXRpYWxpemVyRGVsZWdh dGU+KGNvbm5lY3Rpb24sIGluaXRpYWxpemVyTWVzc2FnZSk7CisgICAgWFBDU2VydmljZUluaXRp YWxpemVyPE5ldHdvcmtQcm9jZXNzLCBOZXR3b3JrU2VydmljZUluaXRpYWxpemVyRGVsZWdhdGU+ KGNvbm5lY3Rpb24sIGluaXRpYWxpemVyTWVzc2FnZSk7CiAjZW5kaWYKIH0KZGlmZiAtLWdpdCBh L1NvdXJjZS9XZWJLaXQyL1NoYXJlZC9FbnRyeVBvaW50VXRpbGl0aWVzL21hYy9YUENTZXJ2aWNl L1hQQ1NlcnZpY2VFbnRyeVBvaW50LmggYi9Tb3VyY2UvV2ViS2l0Mi9TaGFyZWQvRW50cnlQb2lu dFV0aWxpdGllcy9tYWMvWFBDU2VydmljZS9YUENTZXJ2aWNlRW50cnlQb2ludC5oCmluZGV4IDc2 MzMxNjFiMTU2N2VlN2U5YmI5YzRhYTdiNjM5MzM3Y2FhM2QwNjEuLjczZmQ2NzFmNGEyYzMxZGM1 ZDhkYzY2MDU1MDhjYWJmYTZhM2RmMjggMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQyL1NoYXJl ZC9FbnRyeVBvaW50VXRpbGl0aWVzL21hYy9YUENTZXJ2aWNlL1hQQ1NlcnZpY2VFbnRyeVBvaW50 LmgKKysrIGIvU291cmNlL1dlYktpdDIvU2hhcmVkL0VudHJ5UG9pbnRVdGlsaXRpZXMvbWFjL1hQ Q1NlcnZpY2UvWFBDU2VydmljZUVudHJ5UG9pbnQuaApAQCAtNDIsMTIgKzQyLDE2IEBAIHB1Ymxp YzoKIAogICAgIHZpcnR1YWwgflhQQ1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlKCk7CiAKKyAg ICB2aXJ0dWFsIGJvb2wgY2hlY2tFbnRpdGxlbWVudHMoKTsKICAgICB2aXJ0dWFsIGJvb2wgZ2V0 Q29ubmVjdGlvbklkZW50aWZpZXIoSVBDOjpDb25uZWN0aW9uOjpJZGVudGlmaWVyJiBpZGVudGlm aWVyKTsKICAgICB2aXJ0dWFsIGJvb2wgZ2V0Q2xpZW50SWRlbnRpZmllcihTdHJpbmcmIGNsaWVu dElkZW50aWZpZXIpOwogICAgIHZpcnR1YWwgYm9vbCBnZXRDbGllbnRQcm9jZXNzTmFtZShTdHJp bmcmIGNsaWVudFByb2Nlc3NOYW1lKTsKICAgICB2aXJ0dWFsIGJvb2wgZ2V0RXh0cmFJbml0aWFs aXphdGlvbkRhdGEoSGFzaE1hcDxTdHJpbmcsIFN0cmluZz4mIGV4dHJhSW5pdGlhbGl6YXRpb25E YXRhKTsKIAogcHJvdGVjdGVkOgorICAgIGJvb2wgaGFzRW50aXRsZW1lbnQoY29uc3QgY2hhciog ZW50aXRsZW1lbnQpOworICAgIGJvb2wgaXNDbGllbnRTYW5kYm94ZWQoKTsKKwogICAgIHhwY19j b25uZWN0aW9uX3QgbV9jb25uZWN0aW9uOwogICAgIHhwY19vYmplY3RfdCBtX2luaXRpYWxpemVy TWVzc2FnZTsKIH07CkBAIC02Myw2ICs2Nyw5IEBAIHZvaWQgWFBDU2VydmljZUluaXRpYWxpemVy KHhwY19jb25uZWN0aW9uX3QgY29ubmVjdGlvbiwgeHBjX29iamVjdF90IGluaXRpYWxpemVyCiAK ICAgICBJbml0aWFsaXplV2ViS2l0MigpOwogCisgICAgaWYgKCFkZWxlZ2F0ZS5jaGVja0VudGl0 bGVtZW50cygpKQorICAgICAgICBleGl0KEVYSVRfRkFJTFVSRSk7CisKICAgICBDaGlsZFByb2Nl c3NJbml0aWFsaXphdGlvblBhcmFtZXRlcnMgcGFyYW1ldGVyczsKICAgICBpZiAoIWRlbGVnYXRl LmdldENvbm5lY3Rpb25JZGVudGlmaWVyKHBhcmFtZXRlcnMuY29ubmVjdGlvbklkZW50aWZpZXIp KQogICAgICAgICBleGl0KEVYSVRfRkFJTFVSRSk7CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0 Mi9TaGFyZWQvRW50cnlQb2ludFV0aWxpdGllcy9tYWMvWFBDU2VydmljZS9YUENTZXJ2aWNlRW50 cnlQb2ludC5tbSBiL1NvdXJjZS9XZWJLaXQyL1NoYXJlZC9FbnRyeVBvaW50VXRpbGl0aWVzL21h Yy9YUENTZXJ2aWNlL1hQQ1NlcnZpY2VFbnRyeVBvaW50Lm1tCmluZGV4IDZkZDVkYmVkNDY0OTg5 MjU2NDM5Yjc2ZWRlMTMxZDBmNGFmMGI4YmMuLmQ0OGY4MDE4ODU4MmRkM2QyNmQyMzI5OWM5YTUz ZjYwYjU2OWVlODIgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQyL1NoYXJlZC9FbnRyeVBvaW50 VXRpbGl0aWVzL21hYy9YUENTZXJ2aWNlL1hQQ1NlcnZpY2VFbnRyeVBvaW50Lm1tCisrKyBiL1Nv dXJjZS9XZWJLaXQyL1NoYXJlZC9FbnRyeVBvaW50VXRpbGl0aWVzL21hYy9YUENTZXJ2aWNlL1hQ Q1NlcnZpY2VFbnRyeVBvaW50Lm1tCkBAIC0yNyw3ICsyNywyMiBAQAogCiAjaW1wb3J0ICJYUENT ZXJ2aWNlRW50cnlQb2ludC5oIgogCisjaWYgX19oYXNfaW5jbHVkZSg8eHBjL3ByaXZhdGUuaD4p CisjaW1wb3J0IDx4cGMvcHJpdmF0ZS5oPgorI2Vsc2UKK2V4dGVybiAiQyIgeHBjX29iamVjdF90 IHhwY19jb25uZWN0aW9uX2NvcHlfZW50aXRsZW1lbnRfdmFsdWUoeHBjX2Nvbm5lY3Rpb25fdCBj b25uZWN0aW9uLCBjb25zdCBjaGFyICplbnRpdGxlbWVudCk7CiBleHRlcm4gIkMiIG1hY2hfcG9y dF90IHhwY19kaWN0aW9uYXJ5X2NvcHlfbWFjaF9zZW5kKHhwY19vYmplY3RfdCwgY29uc3QgY2hh ciopOworI2VuZGlmCisKKyNpZiBfX2hhc19pbmNsdWRlKDxzYW5kYm94L3ByaXZhdGUuaD4pCisj aW1wb3J0IDxzYW5kYm94L3ByaXZhdGUuaD4KKyNlbHNlCitlbnVtIHNhbmRib3hfZmlsdGVyX3R5 cGUgeworICAgIFNBTkRCT1hfRklMVEVSX05PTkUsCit9OworZXh0ZXJuICJDIgoraW50IHNhbmRi b3hfY2hlY2socGlkX3QsIGNvbnN0IGNoYXIgKm9wZXJhdGlvbiwgZW51bSBzYW5kYm94X2ZpbHRl cl90eXBlLCAuLi4pOworI2VuZGlmCiAKIG5hbWVzcGFjZSBXZWJLaXQgewogCkBAIC0zNSw2ICs1 MCwxMSBAQCBYUENTZXJ2aWNlSW5pdGlhbGl6ZXJEZWxlZ2F0ZTo6flhQQ1NlcnZpY2VJbml0aWFs aXplckRlbGVnYXRlKCkKIHsKIH0KIAorYm9vbCBYUENTZXJ2aWNlSW5pdGlhbGl6ZXJEZWxlZ2F0 ZTo6Y2hlY2tFbnRpdGxlbWVudHMoKQoreworICAgIHJldHVybiB0cnVlOworfQorCiBib29sIFhQ Q1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlOjpnZXRDb25uZWN0aW9uSWRlbnRpZmllcihJUEM6 OkNvbm5lY3Rpb246OklkZW50aWZpZXImIGlkZW50aWZpZXIpCiB7CiAgICAgaWRlbnRpZmllciA9 IElQQzo6Q29ubmVjdGlvbjo6SWRlbnRpZmllcih4cGNfZGljdGlvbmFyeV9jb3B5X21hY2hfc2Vu ZChtX2luaXRpYWxpemVyTWVzc2FnZSwgInNlcnZlci1wb3J0IiksIG1fY29ubmVjdGlvbik7CkBA IC02Miw0ICs4MiwyNCBAQCBib29sIFhQQ1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlOjpnZXRF eHRyYUluaXRpYWxpemF0aW9uRGF0YShIYXNoTWFwPFN0cmluZywgUwogICAgIHJldHVybiB0cnVl OwogfQogCitib29sIFhQQ1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlOjpoYXNFbnRpdGxlbWVu dChjb25zdCBjaGFyKiBlbnRpdGxlbWVudCkKK3sKKyAgICB4cGNfb2JqZWN0X3QgdmFsdWUgPSB4 cGNfY29ubmVjdGlvbl9jb3B5X2VudGl0bGVtZW50X3ZhbHVlKG1fY29ubmVjdGlvbiwgZW50aXRs ZW1lbnQpOworICAgIGlmICghdmFsdWUpCisgICAgICAgIHJldHVybiBmYWxzZTsKKworICAgIGJv b2wgcmVzdWx0ID0geHBjX2dldF90eXBlKHZhbHVlKSA9PSBYUENfVFlQRV9CT09MICYmIHhwY19i b29sX2dldF92YWx1ZSh2YWx1ZSk7CisKKyAgICB4cGNfcmVsZWFzZSh2YWx1ZSk7CisKKyAgICBy ZXR1cm4gcmVzdWx0OworfQorCitib29sIFhQQ1NlcnZpY2VJbml0aWFsaXplckRlbGVnYXRlOjpp c0NsaWVudFNhbmRib3hlZCgpCit7CisgICAgcGlkX3QgY2xpZW50UElEID0geHBjX2Nvbm5lY3Rp b25fZ2V0X3BpZChtX2Nvbm5lY3Rpb24pOworCisgICAgcmV0dXJuIHNhbmRib3hfY2hlY2soY2xp ZW50UElELCBudWxscHRyLCBTQU5EQk9YX0ZJTFRFUl9OT05FKTsKK30KKwogfSAvLyBuYW1lc3Bh Y2UgV2ViS2l0Cg==