218466 2020-11-02 16:04:22 -0800 [macOS] Adopt additional QuartzCore entitlement to reduce accessible endpoints 2020-11-03 09:14:39 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham pvollan webkit-bug-importer oldest_to_newest 1703739 0 bfulgham 2020-11-02 16:04:22 -0800 In iOS 14 we adopted a new entitlement that limited the set of XPC endpoints available to QuartzCore clients. We should do the same on macOS to provide a similar level of protection. 1703740 1 bfulgham 2020-11-02 16:04:31 -0800 <rdar://problem/55790037> 1703744 2 412982 bfulgham 2020-11-02 16:07:05 -0800 Created attachment 412982 Patch 1703781 3 412982 pvollan 2020-11-02 17:37:10 -0800 Comment on attachment 412982 Patch Great! R=me. 1704027 4 ews-feeder 2020-11-03 09:14:38 -0800 Committed r269307: <https://trac.webkit.org/changeset/269307> All reviewed patches have been landed. Closing bug and clearing flags on attachment 412982. 412982 2020-11-02 16:07:05 -0800 2020-11-03 09:14:38 -0800 Patch bug-218466-20201102160704.patch text/plain 2808 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjY5MDc2CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IGJjOGMxMzQ2OGQwNmZkMTIy M2FhZTg1Mjk3YTZiMmY4NzkxNzgzYjAuLjJkOGFlYjU1ZTU1MjNmMTQ4YzRiYjFmNDA1Mzc1Yzdi N2NkZmJhNjMgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTcgQEAKKzIwMjAtMTEtMDIgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW21hY09TXSBBZG9wdCBhZGRp dGlvbmFsIFF1YXJ0ekNvcmUgZW50aXRsZW1lbnQgdG8gcmVkdWNlIGFjY2Vzc2libGUgZW5kcG9p bnRzIAorICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93X2J1Zy5jZ2k/aWQ9MjE4 NDY2CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS81NTc5MDAzNz4KKworICAgICAgICBSZXZpZXdl ZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBJbiBpT1MgMTQgd2UgYWRvcHRlZCBhIG5l dyBlbnRpdGxlbWVudCB0aGF0IGxpbWl0ZWQgdGhlIHNldCBvZiBYUEMgZW5kcG9pbnRzIGF2YWls YWJsZQorICAgICAgICB0byBRdWFydHpDb3JlIGNsaWVudHMuIFdlIHNob3VsZCBkbyB0aGUgc2Ft ZSBvbiBtYWNPUyB0byBwcm92aWRlIGEgc2ltaWxhciBsZXZlbCBvZgorICAgICAgICBwcm90ZWN0 aW9uLgorCisgICAgICAgICogU2NyaXB0cy9wcm9jZXNzLWVudGl0bGVtZW50cy5zaDoKKwogMjAy MC0xMC0yNyAgQ2hyaXMgRHVtZXogIDxjZHVtZXpAYXBwbGUuY29tPgogCiAgICAgICAgIFtHUFVQ cm9jZXNzXSBVc2UgYXN5bmMgSVBDIGZvciBSZW1vdGVBdWRpb0Rlc3RpbmF0aW9uTWFuYWdlcidz IFN0YXJ0QXVkaW9EZXN0aW5hdGlvbiAvIFN0b3BBdWRpb0Rlc3RpbmF0aW9uCmRpZmYgLS1naXQg YS9Tb3VyY2UvV2ViS2l0L1NjcmlwdHMvcHJvY2Vzcy1lbnRpdGxlbWVudHMuc2ggYi9Tb3VyY2Uv V2ViS2l0L1NjcmlwdHMvcHJvY2Vzcy1lbnRpdGxlbWVudHMuc2gKaW5kZXggZTRjMWY5MTI4Yjc5 NDYwZDViNTE1NmUwYTgyMmRlNDY4MWMyNjlmMS4uZGYzYmExZmFjNmMwOGExMDY3NWJjZWRmZjJl NGE0ZGNiMDljNjFjNSAxMDA3NTUKLS0tIGEvU291cmNlL1dlYktpdC9TY3JpcHRzL3Byb2Nlc3Mt ZW50aXRsZW1lbnRzLnNoCisrKyBiL1NvdXJjZS9XZWJLaXQvU2NyaXB0cy9wcm9jZXNzLWVudGl0 bGVtZW50cy5zaApAQCAtMTcsNiArMTcsNyBAQCBmdW5jdGlvbiBtYWNfcHJvY2Vzc193ZWJjb250 ZW50X2VudGl0bGVtZW50cygpCiAgICAgdGhlbgogICAgICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29t LmFwcGxlLnByaXZhdGUud2Via2l0LnVzZS14cGMtZW5kcG9pbnQgYm9vbCBZRVMKICAgICAgICAg cGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5yb290bGVzcy5zdG9yYWdlLldlYktpdFdlYkNvbnRl bnRTYW5kYm94IGJvb2wgWUVTCisgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuUXVh cnR6Q29yZS53ZWJraXQtZW5kLXBvaW50cyBib29sIFlFUwogICAgICAgICBpZiAoKCAiJHtUQVJH RVRfTUFDX09TX1hfVkVSU0lPTl9NQUpPUn0iID49IDExMDAwMCApKQogICAgICAgICB0aGVuCiAg ICAgICAgICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29tLmFwcGxlLmRldmVsb3Blci52aWRlb3Rvb2xi b3guY2xpZW50LXNhbmRib3hlZC1kZWNvZGVyIGJvb2wgWUVTCkBAIC00MCw2ICs0MSw3IEBAIGZ1 bmN0aW9uIG1hY19wcm9jZXNzX2dwdV9lbnRpdGxlbWVudHMoKQogICAgICAgICBmaQogCiAgICAg ICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucm9vdGxlc3Muc3RvcmFnZS5XZWJLaXRHUFVT YW5kYm94IGJvb2wgWUVTCisgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuUXVhcnR6 Q29yZS53ZWJraXQtZW5kLXBvaW50cyBib29sIFlFUwogICAgIGZpCiB9CiAKQEAgLTEwNiw2ICsx MDgsNyBAQCBmdW5jdGlvbiBtYWNjYXRhbHlzdF9wcm9jZXNzX3dlYmNvbnRlbnRfZW50aXRsZW1l bnRzKCkKICAgICBwbGlzdGJ1ZGR5IEFkZCA6Y29tLmFwcGxlLnNlY3VyaXR5LmNzLmFsbG93LWpp dCBib29sIFlFUwogICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucnVubmluZ2JvYXJkLmFz c2VydGlvbnMud2Via2l0IGJvb2wgWUVTCiAgICAgcGxpc3RidWRkeSBBZGQgOmNvbS5hcHBsZS5w cml2YXRlLndlYmtpdC51c2UteHBjLWVuZHBvaW50IGJvb2wgWUVTCisgICAgcGxpc3RidWRkeSBB ZGQgOmNvbS5hcHBsZS5RdWFydHpDb3JlLndlYmtpdC1lbmQtcG9pbnRzIGJvb2wgWUVTCiAgICAg aWYgKCggIiR7VEFSR0VUX01BQ19PU19YX1ZFUlNJT05fTUFKT1J9IiA+PSAxMTAwMDAgKSkKICAg ICB0aGVuCiAgICAgICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUucGFjLnNoYXJlZF9yZWdp b25faWQgc3RyaW5nIFdlYkNvbnRlbnQKQEAgLTExOCw2ICsxMjEsNyBAQCBmdW5jdGlvbiBtYWNj YXRhbHlzdF9wcm9jZXNzX2dwdV9lbnRpdGxlbWVudHMoKQogewogICAgIHBsaXN0YnVkZHkgQWRk IDpjb20uYXBwbGUuc2VjdXJpdHkubmV0d29yay5jbGllbnQgYm9vbCBZRVMKICAgICBwbGlzdGJ1 ZGR5IEFkZCA6Y29tLmFwcGxlLnJ1bm5pbmdib2FyZC5hc3NlcnRpb25zLndlYmtpdCBib29sIFlF UworICAgIHBsaXN0YnVkZHkgQWRkIDpjb20uYXBwbGUuUXVhcnR6Q29yZS53ZWJraXQtZW5kLXBv aW50cyBib29sIFlFUwogfQogCiBmdW5jdGlvbiBtYWNjYXRhbHlzdF9wcm9jZXNzX25ldHdvcmtf ZW50aXRsZW1lbnRzKCkK