183672 2018-03-15 12:16:23 -0700 [macOS] Correct sandbox violations during Flash playback under ToT WebKit 2018-03-15 13:08:46 -0700 1 1 1 Unclassified WebKit WebKit2 WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 183663 1 bfulgham bfulgham bfulgham commit-queue eric.carlson webkit-bug-importer oldest_to_newest 1406755 0 bfulgham 2018-03-15 12:16:23 -0700 This patch adds additional IOKit property permissions to the WebContent and Plugin processes encountered while testing under ToT WebKit. 1406756 1 webkit-bug-importer 2018-03-15 12:16:51 -0700 <rdar://problem/38510839> 1406757 2 335872 bfulgham 2018-03-15 12:21:43 -0700 Created attachment 335872 Patch 1406761 3 bfulgham 2018-03-15 12:40:27 -0700 Note: I observed these sandbox violations while investigating Bug 183663. 1406765 4 335872 commit-queue 2018-03-15 13:08:44 -0700 Comment on attachment 335872 Patch Clearing flags on attachment: 335872 Committed r229638: <https://trac.webkit.org/changeset/229638> 1406766 5 commit-queue 2018-03-15 13:08:46 -0700 All reviewed patches have been landed. Closing bug. 335872 2018-03-15 12:21:43 -0700 2018-03-15 13:08:44 -0700 Patch bug-183672-20180315122142.patch text/plain 5907 bfulgham SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyMjk2MzUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE0IEBACisyMDE4LTAzLTE1ICBCcmVudCBGdWxn aGFtICA8YmZ1bGdoYW1AYXBwbGUuY29tPgorCisgICAgICAgIFttYWNPU10gQ29ycmVjdCBzYW5k Ym94IHZpb2xhdGlvbnMgZHVyaW5nIEZsYXNoIHBsYXliYWNrIHVuZGVyIFRvVCBXZWJLaXQKKyAg ICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTE4MzY3MgorICAg ICAgICA8cmRhcjovL3Byb2JsZW0vMzg1MTA4Mzk+CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9C T0RZIChPT1BTISkuCisKKyAgICAgICAgKiBQbHVnaW5Qcm9jZXNzL21hYy9jb20uYXBwbGUuV2Vi S2l0LnBsdWdpbi1jb21tb24uc2IuaW46CisgICAgICAgICogV2ViUHJvY2Vzcy9jb20uYXBwbGUu V2ViUHJvY2Vzcy5zYi5pbjoKKwogMjAxOC0wMy0xNSAgQnJlbnQgRnVsZ2hhbSAgPGJmdWxnaGFt QGFwcGxlLmNvbT4KIAogICAgICAgICBSRUdSRVNTSU9OKHIyMjk0ODQpOiBQbHVnaW5zIG9mdGVu IHJlcXVpcmUgQ0dTIENvbm5lY3Rpb25zIHRvIGRyYXcKSW5kZXg6IFNvdXJjZS9XZWJLaXQvUGx1 Z2luUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5wbHVnaW4tY29tbW9uLnNiLmluCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUGx1Z2luUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktp dC5wbHVnaW4tY29tbW9uLnNiLmluCShyZXZpc2lvbiAyMjk2MzUpCisrKyBTb3VyY2UvV2ViS2l0 L1BsdWdpblByb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQucGx1Z2luLWNvbW1vbi5zYi5pbgko d29ya2luZyBjb3B5KQpAQCAtMSw0ICsxLDQgQEAKLTsgQ29weXJpZ2h0IChDKSAyMDEzLTIwMTcg QXBwbGUgSW5jLiBBbGwgcmlnaHRzIHJlc2VydmVkLgorOyBDb3B5cmlnaHQgKEMpIDIwMTMtMjAx OCBBcHBsZSBJbmMuIEFsbCByaWdodHMgcmVzZXJ2ZWQuCiA7CiA7IFJlZGlzdHJpYnV0aW9uIGFu ZCB1c2UgaW4gc291cmNlIGFuZCBiaW5hcnkgZm9ybXMsIHdpdGggb3Igd2l0aG91dAogOyBtb2Rp ZmljYXRpb24sIGFyZSBwZXJtaXR0ZWQgcHJvdmlkZWQgdGhhdCB0aGUgZm9sbG93aW5nIGNvbmRp dGlvbnMKQEAgLTIyLDcgKzIyLDcgQEAKIDsgVEhFIFBPU1NJQklMSVRZIE9GIFNVQ0ggREFNQUdF LgogCiAodmVyc2lvbiAxKQotKGRlbnkgZGVmYXVsdCkKKyhkZW55IGRlZmF1bHQgKHdpdGggcGFy dGlhbC1zeW1ib2xpY2F0aW9uKSkKIChhbGxvdyBzeXN0ZW0tYXVkaXQgZmlsZS1yZWFkLW1ldGFk YXRhKQogCiAoaW1wb3J0ICJzeXN0ZW0uc2IiKQpAQCAtNDQsMTMgKzQ0LDE2IEBACiAoZGVueSBp b2tpdC1nZXQtcHJvcGVydGllcykKIChhbGxvdyBpb2tpdC1nZXQtcHJvcGVydGllcwogICAgIChp b2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5BQVBMLChEaXNwbGF5UGlwZXxib290LWRpc3BsYXl8bXV4 LXN3aXRjaC1zdGF0ZSkiKQorICAgIChpb2tpdC1wcm9wZXJ0eSAiQUdDSW5mbyIpCiAgICAgKGlv a2l0LXByb3BlcnR5LXJlZ2V4ICMiXkFUWSxmYl8obGluZWJ5dGVzfG9mZnNldHxzaXplKSIpCisg ICAgKGlva2l0LXByb3BlcnR5ICJBY2NlbENhcHMiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiQWN0 dWF0aW9uU3VwcG9ydGVkIikKICAgICAoaW9raXQtcHJvcGVydHkgIkFsbG93RGlzcGxheVNsZWVw IikKICAgICAoaW9raXQtcHJvcGVydHkgIkFsd2F5c05lZWRzVmVsb2NpdHlDYWxjdWxhdGVkIikK ICAgICAoaW9raXQtcHJvcGVydHkgIkFwcGxlKERpc3BsYXlUeXBlfEdWQUtleURvZXNOb3RFeGlz dHxJbnRlbE1FVkFCdW5kbGVOYW1lfFNlbnNlKSIpCiAgICAgKGlva2l0LXByb3BlcnR5ICJDRkJ1 bmRsZUlkZW50aWZpZXIiKQogICAgIChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5EaXNwbGF5KFBh cmFtZXRlckhhbmRsZXJVc2VzQ2hhclB0cnxQcm9kdWN0SUR8Um91dGluZ3xTZXJpYWxOdW1iZXJ8 VmVuZG9ySUQpIikKKyAgICAoaW9raXQtcHJvcGVydHkgIkRldmVsb3BtZW50IikKICAgICAoaW9r aXQtcHJvcGVydHkgIkRldmljZUVxSUQiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiRHJpdmVyIGlz IFJlYWR5IikKICAgICAoaW9raXQtcHJvcGVydHkgIkVuYWJsZUxQVlAiKQpAQCAtNTgsNyArNjEs NyBAQAogICAgIChpb2tpdC1wcm9wZXJ0eSAiRmFtaWx5IElEIikKICAgICAoaW9raXQtcHJvcGVy dHkgIkZvcmNlU3VwcG9ydGVkIikKICAgICAoaW9raXQtcHJvcGVydHkgIkhJRFBvaW50ZXJBY2Nl bGVyYXRpb25UeXBlIikKLSAgICAoaW9raXQtcHJvcGVydHktcmVnZXggIyJeSU9BY2NlbChJbmRl eHxSZXZpc2lvbnxUeXBlcykiKQorICAgIChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5JT0FjY2Vs KERpc3BsYXlQaXBlQ2FwYWJpbGl0aWVzfEluZGV4fFJldmlzaW9ufFR5cGVzKSIpCiAgICAgKGlv a2l0LXByb3BlcnR5LXJlZ2V4ICMiXklPQXVkaW9Db250cm9sKENoYW5uZWxJRHxJRHxTdWJUeXBl fFVzYWdlKSIpCiAgICAgKGlva2l0LXByb3BlcnR5LXJlZ2V4ICMiXklPQXVkaW9EZXZpY2UoQ2Fu QmVEZWZhdWx0c3xUcmFuc3BvcnRUeXBlKSIpCiAgICAgKGlva2l0LXByb3BlcnR5LXJlZ2V4ICMi XklPQXVkaW9FbmdpbmUoQ2hhbm5lbE5hbWVzfENsaWVudERlc2NyaXB0aW9ufENvcmVBdWRpb1Bs dWdJbnwofERldmljZSlEZXNjcmlwdGlvbnxGbGF2b3J8R2xvYmFsVW5pcXVlSUR8T3V0cHV0Q2hh bm5lbExheW91dHxTYW1wbGVPZmZzZXR8U3RhdGUpIikKQEAgLTgwLDE4ICs4MywyNCBAQAogICAg IChpb2tpdC1wcm9wZXJ0eSAiSU9HZW5lcmFsSW50ZXJlc3QiKQogICAgIChpb2tpdC1wcm9wZXJ0 eSAiSU9HTEJ1bmRsZU5hbWUiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiSU9HVkFDb2RlYyIpCisg ICAgKGlva2l0LXByb3BlcnR5ICJJT0dWQVZUQ2FwYWJpbGl0aWVzIikKKyAgICAoaW9raXQtcHJv cGVydHktcmVnZXggIyJeSU9HVkEoQkdSQUVuY3xDb2RlY3xFbmNvZGVyUmVzdHJpY3RlZHxTY2Fs ZXIpIikKICAgICAoaW9raXQtcHJvcGVydHkgIklPSTJDVHJhbnNhY3Rpb25UeXBlcyIpCiAgICAg KGlva2l0LXByb3BlcnR5LXJlZ2V4ICJeSU9HVkFbQS1aXSsoRGV8RW4pY29kZSIpCiAgICAgKGlv a2l0LXByb3BlcnR5ICJJT01BQ0FkZHJlc3MiKSA7OyBGb3Igc29tZSBGbGFzaCBwbGF5ZXJzCiAg ICAgKGlva2l0LXByb3BlcnR5ICJJT01hdGNoQ2F0ZWdvcnkiKQogICAgIChpb2tpdC1wcm9wZXJ0 eS1yZWdleCAjIl5JT05hbWUoTWF0Y2h8TWF0Y2hlZCkiKQorICAgIChpb2tpdC1wcm9wZXJ0eS1y ZWdleCAjIl5JT1BDSShDbGFzc01hdGNofEV4cHJlc3MoQ2FwYWJpbGl0aWVzfExpbmsoU3RhdHVz fENhcGFiaWxpdGllcykpfFByaW1hcnlNYXRjaHxNU0lNb2RlfFJlc291cmNlZHxUdW5uZWxsZWQp IikKICAgICAoaW9raXQtcHJvcGVydHkgIklPUE1TdHJpY3RUcmVlT3JkZXIiKQogICAgIChpb2tp dC1wcm9wZXJ0eS1yZWdleCAjIl5JT1BsYXRmb3JtKFNlcmlhbE51bWJlcnxVVUlEKSIpIDs7IERp dHRvCiAgICAgKGlva2l0LXByb3BlcnR5ICJJT1Bvd2VyTWFuYWdlbWVudCIpCiAgICAgKGlva2l0 LXByb3BlcnR5ICJJT1Byb2JlU2NvcmUiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiSU9Qcm92aWRl ckNsYXNzIikKKyAgICAoaW9raXQtcHJvcGVydHktcmVnZXggIyJeSU9SZXBvcnQoTHVyZXN8TGVn ZW5kKHxQdWJsaWMpKSIpCiAgICAgKGlva2l0LXByb3BlcnR5ICJJT1NjcmVlblJlc3RvcmVTdGF0 ZSIpCisgICAgKGlva2l0LXByb3BlcnR5ICJJT1NvdXJjZVZlcnNpb24iKQogICAgIChpb2tpdC1w cm9wZXJ0eSAiSU9WQVJlbmRlcmVySUQiKQorICAgIChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5J bnRlcm5hbFN0YXRpc3RpY3MofEFjY20pIikKICAgICAoaW9raXQtcHJvcGVydHktcmVnZXggIyJe TVQoIEJ1aWx0LUlufEhJRERldmljZSkiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiTWFpbnRhaW5Q b3dlckluVUlMb2NrIikKICAgICAoaW9raXQtcHJvcGVydHkgIk1heCBQYWNrZXQgU2l6ZSIpCkBA IC05OSwxMSArMTA4LDE0IEBACiAgICAgKGlva2l0LXByb3BlcnR5LXJlZ2V4ICMiXk11bHRpdG91 Y2ggKElEfFNlcmlhbCBOdW1iZXJ8U3ViZGV2aWNlIElEKSIpCiAgICAgKGlva2l0LXByb3BlcnR5 ICJOWFN5c3RlbUluZm8iKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiTm9BdXRvUm91dGUiKQorICAg IChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5QZXJmb3JtYW5jZVN0YXRpc3RpY3MofEFjY3VtKSIp CiAgICAgKGlva2l0LXByb3BlcnR5ICJQcm90b2NvbCBDaGFyYWN0ZXJpc3RpY3MiKQogICAgIChp b2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5TZW5zb3IgKENvbHVtbnN8UmVnaW9uIChEZXNjcmlwdG9y fFBhcmFtKXxSb3dzfFN1cmZhY2UgKERlc2NyaXB0b3J8SGVpZ2h0fFdpZHRoKSkiKQogICAgIChp b2tpdC1wcm9wZXJ0eSAiU3VwcG9ydEF1ZGlvQVVVQyIpCisgICAgKGlva2l0LXByb3BlcnR5ICJT dXJmYWNlTGlzdCIpCiAgICAgKGlva2l0LXByb3BlcnR5ICJUaW1lU3RhbXBGaWx0ZXJpbmciKQog ICAgIChpb2tpdC1wcm9wZXJ0eSAiVHJhbnNwb3J0IikKKyAgICAoaW9raXQtcHJvcGVydHkgIlZS QU0sdG90YWxNQiIpCiAgICAgKGlva2l0LXByb3BlcnR5ICJXQU5UU19GUkFNRVNfSUdOT1JFRCIp CiAgICAgKGlva2l0LXByb3BlcnR5ICJib2FyZC1pZCIpCiAgICAgKGlva2l0LXByb3BlcnR5LXJl Z2V4ICMiXmF1ZGlvLShjb2RlYy1pbmZvfGRldmljZS0obXZhbHVlfG52YWx1ZSkpIikKSW5kZXg6 IFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20uYXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09Ci0tLSBTb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Mu c2IuaW4JKHJldmlzaW9uIDIyOTYzNSkKKysrIFNvdXJjZS9XZWJLaXQvV2ViUHJvY2Vzcy9jb20u YXBwbGUuV2ViUHJvY2Vzcy5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtMjkwLDYgKzI5MCw3IEBA CiAgICAgKGlva2l0LXByb3BlcnR5ICJTYW1wbGVSYXRlcyIpCiAgICAgKGlva2l0LXByb3BlcnR5 ICJTZXJpYWwgTnVtYmVyIikKICAgICAoaW9raXQtcHJvcGVydHkgIlN0YXJ0dXBEaXNwbGF5IikK KyAgICAoaW9raXQtcHJvcGVydHkgIlN1cmZhY2VMaXN0IikKICAgICAoaW9raXQtcHJvcGVydHkt cmVnZXggIyJeU3VwcG9ydChBdWRpb0FVVUN8c1NpbGVudENsaWNrfFRhcFRvV2FrZSkiKQogICAg IChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5TZW5zb3IgKENvbHVtbnN8Um93cykiKQogICAgIChp b2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5TZW5zb3IgUmVnaW9uIChEZXNjcmlwdG9yfFBhcmFtfFJv d3MpIikKQEAgLTI5OCw2ICsyOTksNyBAQAogICAgIChpb2tpdC1wcm9wZXJ0eSAiVGltZVN0YW1w RmlsdGVyaW5nIikKICAgICAoaW9raXQtcHJvcGVydHkgIlRyYW5zcG9ydCIpCiAgICAgKGlva2l0 LXByb3BlcnR5ICJVc2VyQ2xpZW50RW5hYmxlZCIpCisgICAgKGlva2l0LXByb3BlcnR5ICJWUkFN LHRvdGFsTUIiKQogICAgIChpb2tpdC1wcm9wZXJ0eSAiV0FOVFNfRlJBTUVTX0lHTk9SRUQiKQog ICAgIChpb2tpdC1wcm9wZXJ0eS1yZWdleCAjIl5hY3BpLShkZXZpY2V8cGF0aCkiKQogICAgIChp b2tpdC1wcm9wZXJ0eSAiYXNzaWduZWQtYWRkcmVzc2VzIikK