208460 2020-03-02 11:40:25 -0800 [iOS] Deny mach lookup access to power service 2020-03-19 14:14:31 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham darin ews-feeder ggaren webkit-bug-importer oldest_to_newest 1624643 0 pvollan 2020-03-02 11:40:25 -0800 On iOS, deny mach lookup access to the power service in the WebContent process. 1624644 1 pvollan 2020-03-02 11:40:51 -0800 rdar://problem/57026325 1624647 2 392167 pvollan 2020-03-02 11:46:54 -0800 Created attachment 392167 Patch 1630945 3 pvollan 2020-03-17 16:06:15 -0700 Thanks for reviewing! 1631822 4 pvollan 2020-03-19 14:14:31 -0700 Committed r258726: <https://trac.webkit.org/changeset/258726/webkit> 392167 2020-03-02 11:46:54 -0800 2020-03-19 09:34:44 -0700 Patch bug-208460-20200302114654.patch text/plain 3869 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyNTc3MjApCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDIwLTAzLTAyICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBEZW55IG1hY2ggbG9v a3VwIGFjY2VzcyB0byBwb3dlciBzZXJ2aWNlCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQu b3JnL3Nob3dfYnVnLmNnaT9pZD0yMDg0NjAKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzU3MDI2 MzI1PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIE9u IGlPUywgZGVueSBtYWNoIGxvb2t1cCBhY2Nlc3MgdG8gdGhlIHBvd2VyIHNlcnZpY2UgaW4gdGhl IFdlYkNvbnRlbnQgcHJvY2Vzcy4KKyAgICAgICAgCisgICAgICAgIFRlc3Q6IGZhc3Qvc2FuZGJv eC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC5odG1sCisKKyAgICAgICAgKiBSZXNvdXJjZXMvU2Fu ZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQuc2I6CisKIDIwMjAt MDMtMDIgIEphY29iIFVwaG9mZiAgPGphY29iX3VwaG9mZkBhcHBsZS5jb20+CiAKICAgICAgICAg VW5yZXZpZXdlZCwgcm9sbGluZyBvdXQgcjI1NzY4Ny4KSW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVz b3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNi Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9p b3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiCShyZXZpc2lvbiAyNTc3MTgpCisrKyBT b3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5XZWJL aXQuV2ViQ29udGVudC5zYgkod29ya2luZyBjb3B5KQpAQCAtODI3LDcgKzgyNyw3IEBACiAoYWxs b3cgbWFjaC1sb29rdXAgKHdpdGggcmVwb3J0KSAod2l0aCB0ZWxlbWV0cnkpCiAgICAgICAgKGds b2JhbC1uYW1lICJjb20uYXBwbGUud2ViaW5zcGVjdG9yIikpCiAKLShhbGxvdyBtYWNoLWxvb2t1 cCAod2l0aCB0ZWxlbWV0cnktYmFja3RyYWNlKQorKGRlbnkgbWFjaC1sb29rdXAgKHdpdGggdGVs ZW1ldHJ5LWJhY2t0cmFjZSkKICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5Qb3dlck1hbmFn ZW1lbnQuY29udHJvbCIpKQogCiAoZGVueSBmaWxlLXdyaXRlLWNyZWF0ZSAodm5vZGUtdHlwZSBT WU1MSU5LKSkKSW5kZXg6IExheW91dFRlc3RzL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBMYXlv dXRUZXN0cy9DaGFuZ2VMb2cJKHJldmlzaW9uIDI1NzcxOCkKKysrIExheW91dFRlc3RzL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE0IEBACisyMDIwLTAzLTAyICBQZXIgQXJu ZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXSBEZW55IG1hY2gg bG9va3VwIGFjY2VzcyB0byBwb3dlciBzZXJ2aWNlCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJr aXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMDg0NjAKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzU3 MDI2MzI1PgorCisgICAgICAgIFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAg ICogZmFzdC9zYW5kYm94L2lvcy9zYW5kYm94LW1hY2gtbG9va3VwLWV4cGVjdGVkLnR4dDoKKyAg ICAgICAgKiBmYXN0L3NhbmRib3gvaW9zL3NhbmRib3gtbWFjaC1sb29rdXAuaHRtbDoKKwogMjAy MC0wMy0wMiAgSmFzb24gTGF3cmVuY2UgIDxsYXdyZW5jZS5qQGFwcGxlLmNvbT4KIAogICAgICAg ICBbIE1hYyBdIHdlYmFuaW1hdGlvbnMvYWNjZWxlcmF0ZWQtYW5pbWF0aW9uLXJlbmRlcmVyLWNo YW5nZS5odG1sIGlzIGZsYWt5IGZhaWxpbmcuCkluZGV4OiBMYXlvdXRUZXN0cy9mYXN0L3NhbmRi b3gvaW9zL3NhbmRib3gtbWFjaC1sb29rdXAtZXhwZWN0ZWQudHh0Cj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExh eW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50 eHQJKHJldmlzaW9uIDI1NzcxOCkKKysrIExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9pb3Mvc2Fu ZGJveC1tYWNoLWxvb2t1cC1leHBlY3RlZC50eHQJKHdvcmtpbmcgY29weSkKQEAgLTIwLDMgKzIw LDQgQEAgUEFTUyBpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2NlcwogUEFTUyBpbnRl cm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0dsb2JhbE5hbWUoImNvbS5hcHBsZS5X ZWJLaXQuV2ViQ29udGVudCIsICJjb20uYXBwbGUudGNjZCIpIGlzIGZhbHNlCiBQQVNTIGludGVy bmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgiY29tLmFwcGxlLldl YktpdC5XZWJDb250ZW50IiwgImNvbS5hcHBsZS51aWtpdC52aWV3c2VydmljZSIpIGlzIGZhbHNl CiBQQVNTIGludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vzc1RvR2xvYmFsTmFtZSgi Y29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50IiwgImNvbS5hcHBsZS5hbmFseXRpY3NkIikgaXMg ZmFsc2UKK1BBU1MgaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxO YW1lKCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnQiLCAiY29tLmFwcGxlLlBvd2VyTWFuYWdl bWVudC5jb250cm9sIikgaXMgZmFsc2UKSW5kZXg6IExheW91dFRlc3RzL2Zhc3Qvc2FuZGJveC9p b3Mvc2FuZGJveC1tYWNoLWxvb2t1cC5odG1sCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIExheW91dFRlc3RzL2Zh c3Qvc2FuZGJveC9pb3Mvc2FuZGJveC1tYWNoLWxvb2t1cC5odG1sCShyZXZpc2lvbiAyNTc3MTgp CisrKyBMYXlvdXRUZXN0cy9mYXN0L3NhbmRib3gvaW9zL3NhbmRib3gtbWFjaC1sb29rdXAuaHRt bAkod29ya2luZyBjb3B5KQpAQCAtMjMsNiArMjMsNyBAQCBpZiAod2luZG93LmludGVybmFscykg ewogICAgIHNob3VsZEJlRmFsc2UoImludGVybmFscy5oYXNTYW5kYm94TWFjaExvb2t1cEFjY2Vz c1RvR2xvYmFsTmFtZShcImNvbS5hcHBsZS5XZWJLaXQuV2ViQ29udGVudFwiLCBcImNvbS5hcHBs ZS50Y2NkXCIpIik7CiAgICAgc2hvdWxkQmVGYWxzZSgiaW50ZXJuYWxzLmhhc1NhbmRib3hNYWNo TG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKFwiY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50XCIs IFwiY29tLmFwcGxlLnVpa2l0LnZpZXdzZXJ2aWNlXCIpIik7CiAgICAgc2hvdWxkQmVGYWxzZSgi aW50ZXJuYWxzLmhhc1NhbmRib3hNYWNoTG9va3VwQWNjZXNzVG9HbG9iYWxOYW1lKFwiY29tLmFw cGxlLldlYktpdC5XZWJDb250ZW50XCIsIFwiY29tLmFwcGxlLmFuYWx5dGljc2RcIikiKTsKKyAg ICBzaG91bGRCZUZhbHNlKCJpbnRlcm5hbHMuaGFzU2FuZGJveE1hY2hMb29rdXBBY2Nlc3NUb0ds b2JhbE5hbWUoXCJjb20uYXBwbGUuV2ViS2l0LldlYkNvbnRlbnRcIiwgXCJjb20uYXBwbGUuUG93 ZXJNYW5hZ2VtZW50LmNvbnRyb2xcIikiKTsKIH0KIDwvc2NyaXB0PgogPC9oZWFkPgo=