207482 2020-02-10 10:55:39 -0800 [iOS] Deny mach lookup access to analytics service in the WebContent process 2020-02-12 10:53:30 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham commit-queue darin ggaren webkit-bug-importer oldest_to_newest 1616966 0 pvollan 2020-02-10 10:55:39 -0800 As part of sandbox hardening work, this service should be denied in the WebContent process' sandbox. 1616969 1 390267 pvollan 2020-02-10 11:01:54 -0800 Created attachment 390267 Patch 1616970 2 webkit-bug-importer 2020-02-10 11:02:22 -0800 <rdar://problem/59317479> 1617957 3 390267 pvollan 2020-02-12 07:13:17 -0800 Comment on attachment 390267 Patch Thanks for reviewing! 1617958 4 pvollan 2020-02-12 07:13:45 -0800 I think the win test failure is unrelated to this patch. 1617981 5 390267 commit-queue 2020-02-12 07:33:55 -0800 Comment on attachment 390267 Patch Rejecting attachment 390267 from commit-queue. Failed to run "['/Volumes/Data/EWS/WebKit/Tools/Scripts/webkit-patch', '--status-host=webkit-queues.webkit.org', '--bot-id=webkit-cq-01', 'apply-attachment', '--no-update', '--non-interactive', 390267, '--port=mac']" exit_code: 2 cwd: /Volumes/Data/EWS/WebKit Logging in as commit-queue@webkit.org... Fetching: https://bugs.webkit.org/attachment.cgi?id=390267&action=edit Fetching: https://bugs.webkit.org/show_bug.cgi?id=207482&ctype=xml&excludefield=attachmentdata Processing 1 patch from 1 bug. Processing patch 390267 from bug 207482. Fetching: https://bugs.webkit.org/attachment.cgi?id=390267 Failed to run "[u'/Volumes/Data/EWS/WebKit/Tools/Scripts/svn-apply', '--force', '--reviewer', u'Darin Adler']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit Parsed 5 diffs from patch file(s). patching file Source/WebKit/ChangeLog Hunk #1 succeeded at 1 with fuzz 3. patching file Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb patching file LayoutTests/ChangeLog Hunk #1 succeeded at 1 with fuzz 3. patching file LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt Hunk #1 FAILED at 17. 1 out of 1 hunk FAILED -- saving rejects to file LayoutTests/fast/sandbox/ios/sandbox-mach-lookup-expected.txt.rej patching file LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html Hunk #1 FAILED at 20. 1 out of 1 hunk FAILED -- saving rejects to file LayoutTests/fast/sandbox/ios/sandbox-mach-lookup.html.rej Failed to run "[u'/Volumes/Data/EWS/WebKit/Tools/Scripts/svn-apply', '--force', '--reviewer', u'Darin Adler']" exit_code: 1 cwd: /Volumes/Data/EWS/WebKit Full output: https://webkit-queues.webkit.org/results/13321366 1618111 6 pvollan 2020-02-12 10:53:30 -0800 Committed r256455: <https://trac.webkit.org/changeset/256455/webkit> 390267 2020-02-10 11:01:54 -0800 2020-02-12 07:33:55 -0800 Patch bug-207482-20200210110153.patch text/plain 3950 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNTYxOTUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBACisyMDIwLTAyLTEwICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBEZW55IG1hY2ggbG9v a3VwIGFjY2VzcyB0byBhbmFseXRpY3Mgc2VydmljZSBpbiB0aGUgV2ViQ29udGVudCBwcm9jZXNz CisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMDc0ODIK KworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBBcyBwYXJ0 IG9mIHNhbmRib3ggaGFyZGVuaW5nIHdvcmssIHRoaXMgc2VydmljZSBzaG91bGQgYmUgZGVuaWVk IGluIHRoZSBXZWJDb250ZW50IHByb2Nlc3MnIHNhbmRib3guCisKKyAgICAgICAgVGVzdDogZmFz dC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLmh0bWwKKworICAgICAgICAqIFJlc291 cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYjoK KwogMjAyMC0wMi0xMCAgRGFuaWVsIEJhdGVzICA8ZGFiYXRlc0BhcHBsZS5jb20+CiAKICAgICAg ICAgRGlzYWxsb3cgc2V0dGluZyBiYXNlIFVSTCB0byBhIGRhdGEgb3IgSmF2YVNjcmlwdCBVUkwK SW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFw cGxlLldlYktpdC5XZWJDb250ZW50LnNiCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVz b3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNi CShyZXZpc2lvbiAyNTYwNzApCisrKyBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJv ZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgkod29ya2luZyBjb3B5KQpA QCAtOTAxLDEwICs5MDEsNiBAQAogKGFsbG93IG1hY2gtbG9va3VwCiAgICAgICAgKGdsb2JhbC1u YW1lICJjb20uYXBwbGUud2ViaW5zcGVjdG9yIikpCiAKLTs7IFZhcmlvdXMgc2VydmljZXMgcmVx dWlyZWQgYnkgQ0ZOZXR3b3JrIGFuZCBvdGhlciBmcmFtZXdvcmtzCi0oYWxsb3cgbWFjaC1sb29r dXAKLSAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5hbmFseXRpY3NkIikpCi0KIChhbGxvdyBt YWNoLWxvb2t1cCAod2l0aCByZXBvcnQpICh3aXRoIHRlbGVtZXRyeSkKICAgICAoZ2xvYmFsLW5h bWUgImNvbS5hcHBsZS5Qb3dlck1hbmFnZW1lbnQuY29udHJvbCIpKQogCkluZGV4OiBMYXlvdXRU ZXN0cy9DaGFuZ2VMb2cKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gTGF5b3V0VGVzdHMvQ2hhbmdlTG9nCShyZXZp c2lvbiAyNTYwNzApCisrKyBMYXlvdXRUZXN0cy9DaGFuZ2VMb2cJKHdvcmtpbmcgY29weSkKQEAg LTEsMyArMSwxMyBAQAorMjAyMC0wMi0xMCAgUGVyIEFybmUgVm9sbGFuICA8cHZvbGxhbkBhcHBs ZS5jb20+CisKKyAgICAgICAgW2lPU10gRGVueSBtYWNoIGxvb2t1cCBhY2Nlc3MgdG8gYW5hbHl0 aWNzIHNlcnZpY2UgaW4gdGhlIFdlYkNvbnRlbnQgcHJvY2VzcworICAgICAgICBodHRwczovL2J1 Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjA3NDgyCisKKyAgICAgICAgUmV2aWV3ZWQg YnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgKiBmYXN0L3NhbmRib3gvaW9zL3NhbmRib3gt bWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0OgorICAgICAgICAqIGZhc3Qvc2FuZGJveC9pb3Mvc2Fu ZGJveC1tYWNoLWxvb2t1cC5odG1sOgorCiAyMDIwLTAyLTA3ICBLYXRlIENoZW5leSAgPGthdGhl cmluZV9jaGVuZXlAYXBwbGUuY29tPgogCiAgICAgICAgUmVncmVzc2lvbiAocjI1NjAxMSk6IGh0 dHAvdGVzdHMvcmVzb3VyY2VMb2FkU3RhdGlzdGljcy9hZ2dyZWdhdGUtc29ydGVkLWRhdGEtbm8t c3RvcmFnZS1hY2Nlc3MuaHRtbCBpcyBjb25zaXN0ZW50bHkgZmFpbGluZwpJbmRleDogTGF5b3V0 VGVzdHMvZmFzdC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLWV4cGVjdGVkLnR4dAo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBMYXlvdXRUZXN0cy9mYXN0L3NhbmRib3gvaW9zL3NhbmRib3gtbWFjaC1s b29rdXAtZXhwZWN0ZWQudHh0CShyZXZpc2lvbiAyNTYwNzApCisrKyBMYXlvdXRUZXN0cy9mYXN0 L3NhbmRib3gvaW9zL3NhbmRib3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0CSh3b3JraW5nIGNv cHkpCkBAIC0xNyw0ICsxNyw1IEBAIFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3Vw QWNjZXMKIFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxO YW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLnBvd2VybG9nLnBs eHBjbG9nZ2VyLnhwYyIpIGlzIGZhbHNlCiBQQVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExv b2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgiY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50IiwgImNv bS5hcHBsZS5zeXN0ZW0ubG9nZ2VyIikgaXMgZmFsc2UKIFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRi b3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRl bnQiLCAiY29tLmFwcGxlLmFnZ3JlZ2F0ZWQiKSBpcyBmYWxzZQorUEFTUyBpbnRlcm5hbHMuaGFz U2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0dsb2JhbE5hbWUoImNvbS5hcHBsZS5XZWJLaXQuV2Vi Q29udGVudCIsICJjb20uYXBwbGUuYW5hbHl0aWNzZCIpIGlzIGZhbHNlCiAKSW5kZXg6IExheW91 dFRlc3RzL2Zhc3Qvc2FuZGJveC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC5odG1sCj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0KLS0tIExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC5o dG1sCShyZXZpc2lvbiAyNTYwNzApCisrKyBMYXlvdXRUZXN0cy9mYXN0L3NhbmRib3gvaW9zL3Nh bmRib3gtbWFjaC1sb29rdXAuaHRtbAkod29ya2luZyBjb3B5KQpAQCAtMjAsNiArMjAsNyBAQCBp ZiAod2luZG93LmludGVybmFscykgewogICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5oYXNT YW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZShcImNvbS5hcHBsZS5XZWJLaXQuV2Vi Q29udGVudFwiLCBcImNvbS5hcHBsZS5wb3dlcmxvZy5wbHhwY2xvZ2dlci54cGNcIikiKTsKICAg ICBzaG91bGRCZUZhbHNlKCJpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0ds b2JhbE5hbWUoXCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnRcIiwgXCJjb20uYXBwbGUuc3lz dGVtLmxvZ2dlclwiKSIpOwogICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5oYXNTYW5kYm94 TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZShcImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVu dFwiLCBcImNvbS5hcHBsZS5hZ2dyZWdhdGVkXCIpIik7CisgICAgc2hvdWxkQmVGYWxzZSgiaW50 ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKFwiY29tLmFwcGxl LldlYktpdC5XZWJDb250ZW50XCIsIFwiY29tLmFwcGxlLmFuYWx5dGljc2RcIikiKTsKIH0KIDwv c2NyaXB0PgogPC9oZWFkPgo=