208455 2020-03-02 11:02:34 -0800 [iOS] Deny mach lookup access to distributed notifications in the WebContent process 2020-03-02 11:58:15 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham ggaren webkit-bug-importer oldest_to_newest 1624616 0 pvollan 2020-03-02 11:02:34 -0800 On iOS, deny mach lookup access to the service "com.apple.distributed_notifications@1v3" in the WebContent process. 1624617 1 webkit-bug-importer 2020-03-02 11:03:02 -0800 <rdar://problem/59958406> 1624623 2 392157 pvollan 2020-03-02 11:07:25 -0800 Created attachment 392157 Patch 1624656 3 pvollan 2020-03-02 11:58:15 -0800 Committed r257723: <https://trac.webkit.org/changeset/257723/webkit> 392157 2020-03-02 11:07:25 -0800 2020-03-02 11:39:08 -0800 Patch bug-208455-20200302110724.patch text/plain 3151 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNTc3MTkpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE2IEBACisyMDIwLTAzLTAyICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBEZW55IG1hY2ggbG9v a3VwIGFjY2VzcyB0byBkaXN0cmlidXRlZCBub3RpZmljYXRpb25zIGluIHRoZSBXZWJDb250ZW50 IHByb2Nlc3MKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lk PTIwODQ1NQorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg IE9uIGlPUywgZGVueSBtYWNoIGxvb2t1cCBhY2Nlc3MgdG8gdGhlIHNlcnZpY2UgImNvbS5hcHBs ZS5kaXN0cmlidXRlZF9ub3RpZmljYXRpb25zQDF2MyIgaW4gdGhlIFdlYkNvbnRlbnQgcHJvY2Vz cy4KKworICAgICAgICBUZXN0OiBmYXN0L3NhbmRib3gvaW9zL3NhbmRib3gtbWFjaC1sb29rdXAu aHRtbAorCisgICAgICAgICogUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxl LldlYktpdC5XZWJDb250ZW50LnNiOgorCiAyMDIwLTAzLTAyICBKYWNvYiBVcGhvZmYgIDxqYWNv Yl91cGhvZmZAYXBwbGUuY29tPgogCiAgICAgICAgIFVucmV2aWV3ZWQsIHJvbGxpbmcgb3V0IHIy NTc2ODcuCkluZGV4OiBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9z L2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudC5zYgo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi S2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJLaXQuV2ViQ29u dGVudC5zYgkocmV2aXNpb24gMjU3NzE4KQorKysgU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2Fu ZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2IJKHdvcmtpbmcg Y29weSkKQEAgLTUzOCw3ICs1MzgsNyBAQAogICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmxv Z2QuZXZlbnRzIikKICkKIAotKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHJlcG9ydCkgKHdpdGgg dGVsZW1ldHJ5KQorKGRlbnkgbWFjaC1sb29rdXAgKHdpdGggcmVwb3J0KSAod2l0aCB0ZWxlbWV0 cnkpCiAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUuZGlzdHJpYnV0ZWRfbm90aWZpY2F0aW9u c0AxdjMiKSkKIAogKGFsbG93IGlwYy1wb3NpeC1zaG0tcmVhZCoKSW5kZXg6IExheW91dFRlc3Rz L2Zhc3Qvc2FuZGJveC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50eHQKPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQotLS0gTGF5b3V0VGVzdHMvZmFzdC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3Vw LWV4cGVjdGVkLnR4dAkocmV2aXNpb24gMjU3NzE4KQorKysgTGF5b3V0VGVzdHMvZmFzdC9zYW5k Ym94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLWV4cGVjdGVkLnR4dAkod29ya2luZyBjb3B5KQpA QCAtMjAsMyArMjAsNCBAQCBQQVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vz CiBQQVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgi Y29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50IiwgImNvbS5hcHBsZS50Y2NkIikgaXMgZmFsc2UK IFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKCJj b20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLnVpa2l0LnZpZXdzZXJ2aWNl IikgaXMgZmFsc2UKIFBBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9H bG9iYWxOYW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLmFuYWx5 dGljc2QiKSBpcyBmYWxzZQorUEFTUyBpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nl c3NUb0dsb2JhbE5hbWUoImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudCIsICJjb20uYXBwbGUu ZGlzdHJpYnV0ZWRfbm90aWZpY2F0aW9uc0AxdjMiKSBpcyBmYWxzZQpJbmRleDogTGF5b3V0VGVz dHMvZmFzdC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLmh0bWwKPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQot LS0gTGF5b3V0VGVzdHMvZmFzdC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLmh0bWwJ KHJldmlzaW9uIDI1NzcxOCkKKysrIExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9pb3Mvc2FuZGJv eC1tYWNoLWxvb2t1cC5odG1sCSh3b3JraW5nIGNvcHkpCkBAIC0yMyw2ICsyMyw3IEBAIGlmICh3 aW5kb3cuaW50ZXJuYWxzKSB7CiAgICAgc2hvdWxkQmVGYWxzZSgiaW50ZXJuYWxzLmhhc1NhbmRi b3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKFwiY29tLmFwcGxlLldlYktpdC5XZWJDb250 ZW50XCIsIFwiY29tLmFwcGxlLnRjY2RcIikiKTsKICAgICBzaG91bGRCZUZhbHNlKCJpbnRlcm5h bHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0dsb2JhbE5hbWUoXCJjb20uYXBwbGUuV2Vi S2l0LldlYkNvbnRlbnRcIiwgXCJjb20uYXBwbGUudWlraXQudmlld3NlcnZpY2VcIikiKTsKICAg ICBzaG91bGRCZUZhbHNlKCJpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0ds b2JhbE5hbWUoXCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnRcIiwgXCJjb20uYXBwbGUuYW5h bHl0aWNzZFwiKSIpOworICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5oYXNTYW5kYm94TWFj aExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZShcImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudFwi LCBcImNvbS5hcHBsZS5kaXN0cmlidXRlZF9ub3RpZmljYXRpb25zQDF2M1wiKSIpOwogfQogPC9z Y3JpcHQ+CiA8L2hlYWQ+Cg==