154755 2016-02-26 15:23:30 -0800 Clear credentials and prevent unauthorized credential storage 2016-03-01 11:17:09 -0800 1 1 1 Unclassified WebKit New Bugs WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED P2 Normal --- 1 achristensen achristensen beidson oldest_to_newest 1168714 0 achristensen 2016-02-26 15:23:30 -0800 Clear credentials and prevent unauthorized credential storage 1168715 1 272374 achristensen 2016-02-26 15:25:27 -0800 Created attachment 272374 Patch 1169503 2 achristensen 2016-03-01 11:17:09 -0800 http://trac.webkit.org/changeset/197223 272374 2016-02-26 15:25:27 -0800 2016-02-26 15:48:55 -0800 Patch bug-154755-20160226152510.patch text/plain 5702 achristensen SW5kZXg6IFNvdXJjZS9XZWJLaXQyL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0Mi9DaGFuZ2VMb2cJKHJldmlzaW9uIDE5NzIxMikKKysrIFNvdXJjZS9XZWJLaXQyL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDI3IEBACisyMDE2LTAyLTI2ICBBbGV4IENo cmlzdGVuc2VuICA8YWNocmlzdGVuc2VuQHdlYmtpdC5vcmc+CisKKyAgICAgICAgQ2xlYXIgY3Jl ZGVudGlhbHMgYW5kIHByZXZlbnQgdW5hdXRob3JpemVkIGNyZWRlbnRpYWwgc3RvcmFnZSB3aGVu IHVzaW5nIE5ldHdvcmtTZXNzaW9uCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3No b3dfYnVnLmNnaT9pZD0xNTQ3NTUKKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMh KS4KKworICAgICAgICBDcmVkZW50aWFscyBmcm9tIHByZXZpb3VzIHRlc3RzIHdlcmUgYmVpbmcg dXNlZCBzb21ldGltZXMsIG5vdGFibHkgaW4gCisgICAgICAgIGh0dHAvdGVzdHMvbWlzYy80MDEt YWx0ZXJuYXRpdmUtY29udGVudC5waHAgd2hlbiBydW5uaW5nIG11bHRpcGxlIGNyZWRlbnRpYWwt YmFzZWQKKyAgICAgICAgdGVzdHMgd2l0aCB0aGUgc2FtZSBXZWJLaXRUZXN0UnVubmVyLgorCisg ICAgICAgICogTmV0d29ya1Byb2Nlc3MvTmV0d29ya0RhdGFUYXNrLmg6CisgICAgICAgICogTmV0 d29ya1Byb2Nlc3MvTmV0d29ya1Byb2Nlc3MuY3BwOgorICAgICAgICAoV2ViS2l0OjpOZXR3b3Jr UHJvY2Vzczo6Y2xlYXJDYWNoZWRDcmVkZW50aWFscyk6CisgICAgICAgIChXZWJLaXQ6Ok5ldHdv cmtQcm9jZXNzOjplbnN1cmVQcml2YXRlQnJvd3NpbmdTZXNzaW9uKToKKyAgICAgICAgKiBOZXR3 b3JrUHJvY2Vzcy9OZXR3b3JrU2Vzc2lvbi5oOgorICAgICAgICAqIE5ldHdvcmtQcm9jZXNzL2Nv Y29hL05ldHdvcmtEYXRhVGFza0NvY29hLm1tOgorICAgICAgICAoV2ViS2l0OjpOZXR3b3JrRGF0 YVRhc2s6Ok5ldHdvcmtEYXRhVGFzayk6CisgICAgICAgIChXZWJLaXQ6Ok5ldHdvcmtEYXRhVGFz azo6dHJ5UGFzc3dvcmRCYXNlZEF1dGhlbnRpY2F0aW9uKToKKyAgICAgICAgKiBOZXR3b3JrUHJv Y2Vzcy9jb2NvYS9OZXR3b3JrU2Vzc2lvbkNvY29hLm1tOgorICAgICAgICAoV2ViS2l0OjpOZXR3 b3JrU2Vzc2lvbjo6fk5ldHdvcmtTZXNzaW9uKToKKyAgICAgICAgKFdlYktpdDo6TmV0d29ya1Nl c3Npb246OmNsZWFyQ3JlZGVudGlhbHMpOgorICAgICAgICAoV2ViS2l0OjpOZXR3b3JrU2Vzc2lv bjo6ZGF0YVRhc2tGb3JJZGVudGlmaWVyKToKKwogMjAxNi0wMi0yNiAgQmV0aCBEYWtpbiAgPGJk YWtpbkBhcHBsZS5jb20+CiAKICAgICAgICAgQXR0ZW1wdGVkIGJ1aWxkIGZpeC4KSW5kZXg6IFNv dXJjZS9XZWJLaXQyL05ldHdvcmtQcm9jZXNzL05ldHdvcmtEYXRhVGFzay5oCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0K LS0tIFNvdXJjZS9XZWJLaXQyL05ldHdvcmtQcm9jZXNzL05ldHdvcmtEYXRhVGFzay5oCShyZXZp c2lvbiAxOTcxODYpCisrKyBTb3VyY2UvV2ViS2l0Mi9OZXR3b3JrUHJvY2Vzcy9OZXR3b3JrRGF0 YVRhc2suaAkod29ya2luZyBjb3B5KQpAQCAtMTQ2LDYgKzE0Niw3IEBAIHByaXZhdGU6CiAgICAg RG93bmxvYWRJRCBtX3BlbmRpbmdEb3dubG9hZElEOwogICAgIFN0cmluZyBtX3VzZXI7CiAgICAg U3RyaW5nIG1fcGFzc3dvcmQ7CisgICAgV2ViQ29yZTo6U3RvcmVkQ3JlZGVudGlhbHMgbV9zdG9y ZWRDcmVkZW50aWFsczsKICAgICBTdHJpbmcgbV9sYXN0SFRUUE1ldGhvZDsKICAgICBTdHJpbmcg bV9wZW5kaW5nRG93bmxvYWRMb2NhdGlvbjsKICAgICBXZWJDb3JlOjpSZXNvdXJjZVJlcXVlc3Qg bV9maXJzdFJlcXVlc3Q7CkluZGV4OiBTb3VyY2UvV2ViS2l0Mi9OZXR3b3JrUHJvY2Vzcy9OZXR3 b3JrUHJvY2Vzcy5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nl c3MvTmV0d29ya1Byb2Nlc3MuY3BwCShyZXZpc2lvbiAxOTcxODYpCisrKyBTb3VyY2UvV2ViS2l0 Mi9OZXR3b3JrUHJvY2Vzcy9OZXR3b3JrUHJvY2Vzcy5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTI2 Nyw2ICsyNjcsOSBAQCB2b2lkIE5ldHdvcmtQcm9jZXNzOjpjcmVhdGVOZXR3b3JrQ29ubmVjCiB2 b2lkIE5ldHdvcmtQcm9jZXNzOjpjbGVhckNhY2hlZENyZWRlbnRpYWxzKCkKIHsKICAgICBOZXR3 b3JrU3RvcmFnZVNlc3Npb246OmRlZmF1bHRTdG9yYWdlU2Vzc2lvbigpLmNyZWRlbnRpYWxTdG9y YWdlKCkuY2xlYXJDcmVkZW50aWFscygpOworI2lmIFVTRShORVRXT1JLX1NFU1NJT04pCisgICAg TmV0d29ya1Nlc3Npb246OmRlZmF1bHRTZXNzaW9uKCkuY2xlYXJDcmVkZW50aWFscygpOworI2Vu ZGlmCiB9CiAKIHZvaWQgTmV0d29ya1Byb2Nlc3M6OmVuc3VyZVByaXZhdGVCcm93c2luZ1Nlc3Np b24oU2Vzc2lvbklEIHNlc3Npb25JRCkKSW5kZXg6IFNvdXJjZS9XZWJLaXQyL05ldHdvcmtQcm9j ZXNzL05ldHdvcmtTZXNzaW9uLmgKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdDIvTmV0d29y a1Byb2Nlc3MvTmV0d29ya1Nlc3Npb24uaAkocmV2aXNpb24gMTk3MTg2KQorKysgU291cmNlL1dl YktpdDIvTmV0d29ya1Byb2Nlc3MvTmV0d29ya1Nlc3Npb24uaAkod29ya2luZyBjb3B5KQpAQCAt NTQsNiArNTQsNyBAQCBwdWJsaWM6CiAgICAgfk5ldHdvcmtTZXNzaW9uKCk7CiAKICAgICBzdGF0 aWMgTmV0d29ya1Nlc3Npb24mIGRlZmF1bHRTZXNzaW9uKCk7CisgICAgdm9pZCBjbGVhckNyZWRl bnRpYWxzKCk7CiAKICAgICBOZXR3b3JrRGF0YVRhc2sqIGRhdGFUYXNrRm9ySWRlbnRpZmllcihO ZXR3b3JrRGF0YVRhc2s6OlRhc2tJZGVudGlmaWVyKTsKIApJbmRleDogU291cmNlL1dlYktpdDIv TmV0d29ya1Byb2Nlc3MvY29jb2EvTmV0d29ya0RhdGFUYXNrQ29jb2EubW0KPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvY29jb2EvTmV0d29ya0RhdGFUYXNrQ29j b2EubW0JKHJldmlzaW9uIDE5NzE4NikKKysrIFNvdXJjZS9XZWJLaXQyL05ldHdvcmtQcm9jZXNz L2NvY29hL05ldHdvcmtEYXRhVGFza0NvY29hLm1tCSh3b3JraW5nIGNvcHkpCkBAIC00Nyw2ICs0 Nyw3IEBAIE5ldHdvcmtEYXRhVGFzazo6TmV0d29ya0RhdGFUYXNrKE5ldHdvcmsKICAgICA6IG1f ZmFpbHVyZVRpbWVyKCp0aGlzLCAmTmV0d29ya0RhdGFUYXNrOjpmYWlsdXJlVGltZXJGaXJlZCkK ICAgICAsIG1fc2Vzc2lvbihzZXNzaW9uKQogICAgICwgbV9jbGllbnQoJmNsaWVudCkKKyAgICAs IG1fc3RvcmVkQ3JlZGVudGlhbHMoc3RvcmVkQ3JlZGVudGlhbHMpCiAgICAgLCBtX2xhc3RIVFRQ TWV0aG9kKHJlcXVlc3RXaXRoQ3JlZGVudGlhbHMuaHR0cE1ldGhvZCgpKQogICAgICwgbV9maXJz dFJlcXVlc3QocmVxdWVzdFdpdGhDcmVkZW50aWFscykKICAgICAsIG1fc2hvdWxkQ2xlYXJSZWZl cnJlck9uSFRUUFNUb0hUVFBSZWRpcmVjdChzaG91bGRDbGVhclJlZmVycmVyT25IVFRQU1RvSFRU UFJlZGlyZWN0KQpAQCAtMjEwLDcgKzIxMSw4IEBAIGJvb2wgTmV0d29ya0RhdGFUYXNrOjp0cnlQ YXNzd29yZEJhc2VkQXUKICAgICAgICAgcmV0dXJuIGZhbHNlOwogICAgIAogICAgIGlmICghbV91 c2VyLmlzTnVsbCgpICYmICFtX3Bhc3N3b3JkLmlzTnVsbCgpKSB7Ci0gICAgICAgIGNvbXBsZXRp b25IYW5kbGVyKEF1dGhlbnRpY2F0aW9uQ2hhbGxlbmdlRGlzcG9zaXRpb246OlVzZUNyZWRlbnRp YWwsIFdlYkNvcmU6OkNyZWRlbnRpYWwobV91c2VyLCBtX3Bhc3N3b3JkLCBXZWJDb3JlOjpDcmVk ZW50aWFsUGVyc2lzdGVuY2VGb3JTZXNzaW9uKSk7CisgICAgICAgIGF1dG8gcGVyc2lzdGVuY2Ug PSBtX3N0b3JlZENyZWRlbnRpYWxzID09IFdlYkNvcmU6OlN0b3JlZENyZWRlbnRpYWxzOjpBbGxv d1N0b3JlZENyZWRlbnRpYWxzID8gV2ViQ29yZTo6Q3JlZGVudGlhbFBlcnNpc3RlbmNlRm9yU2Vz c2lvbiA6IFdlYkNvcmU6OkNyZWRlbnRpYWxQZXJzaXN0ZW5jZU5vbmU7CisgICAgICAgIGNvbXBs ZXRpb25IYW5kbGVyKEF1dGhlbnRpY2F0aW9uQ2hhbGxlbmdlRGlzcG9zaXRpb246OlVzZUNyZWRl bnRpYWwsIFdlYkNvcmU6OkNyZWRlbnRpYWwobV91c2VyLCBtX3Bhc3N3b3JkLCBwZXJzaXN0ZW5j ZSkpOwogICAgICAgICBtX3VzZXIgPSBTdHJpbmcoKTsKICAgICAgICAgbV9wYXNzd29yZCA9IFN0 cmluZygpOwogICAgICAgICByZXR1cm4gdHJ1ZTsKSW5kZXg6IFNvdXJjZS9XZWJLaXQyL05ldHdv cmtQcm9jZXNzL2NvY29hL05ldHdvcmtTZXNzaW9uQ29jb2EubW0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvY29jb2EvTmV0d29ya1Nlc3Npb25Db2NvYS5tbQko cmV2aXNpb24gMTk3MTg2KQorKysgU291cmNlL1dlYktpdDIvTmV0d29ya1Byb2Nlc3MvY29jb2Ev TmV0d29ya1Nlc3Npb25Db2NvYS5tbQkod29ya2luZyBjb3B5KQpAQCAtMjUzLDYgKzI1MywxOCBA QCBOZXR3b3JrU2Vzc2lvbjo6fk5ldHdvcmtTZXNzaW9uKCkKICAgICBbbV9zZXNzaW9uV2l0aG91 dENyZWRlbnRpYWxTdG9yYWdlIGludmFsaWRhdGVBbmRDYW5jZWxdOwogfQogCit2b2lkIE5ldHdv cmtTZXNzaW9uOjpjbGVhckNyZWRlbnRpYWxzKCkKK3sKKyAgICBOU1VSTENyZWRlbnRpYWxTdG9y YWdlICpjcmVkZW50aWFsU3RvcmFnZSA9IG1fc2Vzc2lvbldpdGhDcmVkZW50aWFsU3RvcmFnZS5n ZXQoKS5jb25maWd1cmF0aW9uLlVSTENyZWRlbnRpYWxTdG9yYWdlOworICAgIE5TRGljdGlvbmFy eTxOU1VSTFByb3RlY3Rpb25TcGFjZSAqLCBOU0RpY3Rpb25hcnk8TlNTdHJpbmcgKiwgTlNVUkxD cmVkZW50aWFsICo+ICo+ICpjcmVkZW50aWFscyA9IGNyZWRlbnRpYWxTdG9yYWdlLmFsbENyZWRl bnRpYWxzOworICAgIAorICAgIGZvciAoTlNVUkxQcm90ZWN0aW9uU3BhY2UgKnByb3RlY3Rpb25T cGFjZSBpbiBjcmVkZW50aWFscykgeworICAgICAgICBOU0RpY3Rpb25hcnk8TlNTdHJpbmcgKiwg TlNVUkxDcmVkZW50aWFsICo+ICpjcmVkZW50aWFsc0RpY3QgPSBbY3JlZGVudGlhbHMgb2JqZWN0 Rm9yS2V5OnByb3RlY3Rpb25TcGFjZV07CisgICAgICAgIGZvciAoTlNTdHJpbmcgKnVzZXIgaW4g Y3JlZGVudGlhbHNEaWN0KQorICAgICAgICAgICAgW2NyZWRlbnRpYWxTdG9yYWdlIHJlbW92ZUNy ZWRlbnRpYWw6W2NyZWRlbnRpYWxzRGljdCBvYmplY3RGb3JLZXk6dXNlcl0gZm9yUHJvdGVjdGlv blNwYWNlOnByb3RlY3Rpb25TcGFjZV07CisgICAgfQorfQorCiBOZXR3b3JrRGF0YVRhc2sqIE5l dHdvcmtTZXNzaW9uOjpkYXRhVGFza0ZvcklkZW50aWZpZXIoTmV0d29ya0RhdGFUYXNrOjpUYXNr SWRlbnRpZmllciB0YXNrSWRlbnRpZmllcikKIHsKICAgICBBU1NFUlQoaXNNYWluVGhyZWFkKCkp Owo=