225614 2021-05-10 14:32:36 -0700 [Cocoa] Extend Network Process sandbox to access more Network Extension databases 2021-05-10 17:25:34 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 bfulgham bfulgham bfulgham pvollan webkit-bug-importer oldest_to_newest 1758641 0 bfulgham 2021-05-10 14:32:36 -0700 We don't allow the Network Process to directly memory-map files used by the network extensions feature. We can improve memory performance by allowing the process to mmap these files, rather than forcing a series of XPC operations to build the same database in memory. This has been reviewed by product security and approved. 1758645 1 bfulgham 2021-05-10 14:33:46 -0700 <rdar://problem/77696566> 1758651 2 428203 bfulgham 2021-05-10 14:37:40 -0700 Created attachment 428203 Patch 1758660 3 428203 pvollan 2021-05-10 14:52:55 -0700 Comment on attachment 428203 Patch R=me. 1758746 4 ews-feeder 2021-05-10 17:25:33 -0700 Committed r277309 (237570@main): <https://commits.webkit.org/237570@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 428203. 428203 2021-05-10 14:37:40 -0700 2021-05-10 17:25:34 -0700 Patch bug-225614-20210510143739.patch text/plain 2982 bfulgham U3VidmVyc2lvbiBSZXZpc2lvbjogMjc3Mjg5CmRpZmYgLS1naXQgYS9Tb3VyY2UvV2ViS2l0L0No YW5nZUxvZyBiL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCmluZGV4IDlkNmVlMzQyMDE5NDE5MDkx MjMxMmY2MDAxNDE4ZTEzMDY4NDU5OGEuLjYxYjE2OWQ5OTEzNjRjNzc0OWM3MGI4ZmQ5M2I5NTgz MTI1ZmU4ZjUgMTAwNjQ0Ci0tLSBhL1NvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCisrKyBiL1NvdXJj ZS9XZWJLaXQvQ2hhbmdlTG9nCkBAIC0xLDMgKzEsMTggQEAKKzIwMjEtMDUtMTAgIEJyZW50IEZ1 bGdoYW0gIDxiZnVsZ2hhbUBhcHBsZS5jb20+CisKKyAgICAgICAgW0NvY29hXSBFeHRlbmQgTmV0 d29yayBQcm9jZXNzIHNhbmRib3ggdG8gYWNjZXNzIG1vcmUgTmV0d29yayBFeHRlbnNpb24gZGF0 YWJhc2VzCisgICAgICAgIGh0dHBzOi8vYnVncy53ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0y MjU2MTQKKyAgICAgICAgPHJkYXI6Ly9wcm9ibGVtLzc3Njk2NTY2PgorCisgICAgICAgIFJldmll d2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFdlIGRvbid0IGFsbG93IHRoZSBOZXR3 b3JrIFByb2Nlc3MgdG8gZGlyZWN0bHkgbWVtb3J5LW1hcCBmaWxlcyB1c2VkIGJ5IHRoZSBuZXR3 b3JrIGV4dGVuc2lvbnMKKyAgICAgICAgZmVhdHVyZS4gV2UgY2FuIGltcHJvdmUgbWVtb3J5IHBl cmZvcm1hbmNlIGJ5IGFsbG93aW5nIHRoZSBwcm9jZXNzIHRvIG1tYXAgdGhlc2UgZmlsZXMsIHJh dGhlcgorICAgICAgICB0aGFuIGZvcmNpbmcgYSBzZXJpZXMgb2YgWFBDIG9wZXJhdGlvbnMgdG8g YnVpbGQgdGhlIHNhbWUgZGF0YWJhc2UgaW4gbWVtb3J5LgorCisgICAgICAgICogTmV0d29ya1By b2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW46CisgICAgICAg ICogUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5OZXR3b3Jr aW5nLnNiOgorCiAyMDIxLTA1LTEwICBBbGV4IENocmlzdGVuc2VuICA8YWNocmlzdGVuc2VuQHdl YmtpdC5vcmc+CiAKICAgICAgICAgQWRkIE9iakMgQVBJIHNpbWlsYXIgdG8gV0tCdW5kbGVQYWdl Q29weUdyb3VwSWRlbnRpZmllcgpkaWZmIC0tZ2l0IGEvU291cmNlL1dlYktpdC9OZXR3b3JrUHJv Y2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJvY2Vzcy5zYi5pbiBiL1NvdXJjZS9X ZWJLaXQvTmV0d29ya1Byb2Nlc3MvbWFjL2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Mu c2IuaW4KaW5kZXggOTgzODMxNzg2ZGM0MWNlMGEyZmI0NDJmMzQ1ODkzMGViZmVlZDNjZC4uMzVm MzQwN2Y2YzkzODNkYjdkZGI3NWE4YTYwNDk2MWYxYTY3NjQwZiAxMDA2NDQKLS0tIGEvU291cmNl L1dlYktpdC9OZXR3b3JrUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJvY2Vz cy5zYi5pbgorKysgYi9Tb3VyY2UvV2ViS2l0L05ldHdvcmtQcm9jZXNzL21hYy9jb20uYXBwbGUu V2ViS2l0Lk5ldHdvcmtQcm9jZXNzLnNiLmluCkBAIC00NzMsMyArNDczLDcgQEAKIAogKGFsbG93 IGZpbGUtcmVhZCogZmlsZS13cml0ZSoKICAgICAoaG9tZS1zdWJwYXRoICIvTGlicmFyeS9IVFRQ U3RvcmFnZXMiKSkKKworKGFsbG93IGZpbGUtcmVhZCoKKyAgICAocHJlZml4ICIvcHJpdmF0ZS92 YXIvZGIvY29tLmFwcGxlLm5ldHdvcmtleHRlbnNpb24uIikKKykKZGlmZiAtLWdpdCBhL1NvdXJj ZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5O ZXR3b3JraW5nLnNiIGIvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lv cy9jb20uYXBwbGUuV2ViS2l0Lk5ldHdvcmtpbmcuc2IKaW5kZXggZTFiNzIwMWViMmQxNzU2YWEz MDYxMTU3NDQyY2JmMDljZWE3OWJjOC4uMGMyZTk5M2JjMGZjNDNkYTVjZTNiMzk3ZDNhZGU5OTM5 ZWFmM2ExYyAxMDA2NDQKLS0tIGEvU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2Zp bGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0Lk5ldHdvcmtpbmcuc2IKKysrIGIvU291cmNlL1dlYktp dC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0Lk5ldHdvcmtp bmcuc2IKQEAgLTEsNCArMSw0IEBACi07IENvcHlyaWdodCAoQykgMjAxNC0yMDIwIEFwcGxlIElu Yy4gQWxsIHJpZ2h0cyByZXNlcnZlZC4KKzsgQ29weXJpZ2h0IChDKSAyMDE0LTIwMjEgQXBwbGUg SW5jLiBBbGwgcmlnaHRzIHJlc2VydmVkLgogOwogOyBSZWRpc3RyaWJ1dGlvbiBhbmQgdXNlIGlu IHNvdXJjZSBhbmQgYmluYXJ5IGZvcm1zLCB3aXRoIG9yIHdpdGhvdXQKIDsgbW9kaWZpY2F0aW9u LCBhcmUgcGVybWl0dGVkIHByb3ZpZGVkIHRoYXQgdGhlIGZvbGxvd2luZyBjb25kaXRpb25zCkBA IC0xMjYsNyArMTI2LDEwIEBACiAgICAgKHdpdGgtZmlsdGVyIChlbnRpdGxlbWVudC1pcy1wcmVz ZW50ICJjb20uYXBwbGUucHJpdmF0ZS5uZXR3b3JrZXh0ZW5zaW9uLmNvbmZpZ3VyYXRpb24iKQog ICAgICAgICAgICAoYWxsb3cgZmlsZS1yZWFkKiAobGl0ZXJhbCAiL3ByaXZhdGUvdmFyL3ByZWZl cmVuY2VzL2NvbS5hcHBsZS5uZXR3b3JrZXh0ZW5zaW9uLnBsaXN0IikpKQogCi0gICAgKGFsbG93 IGZpbGUtcmVhZCogKGxpdGVyYWwgIi9wcml2YXRlL3Zhci9wcmVmZXJlbmNlcy9jb20uYXBwbGUu bmV0d29ya2V4dGVuc2lvbi51dWlkY2FjaGUucGxpc3QiKSkKKyAgICAoYWxsb3cgZmlsZS1yZWFk KgorICAgICAgICAobGl0ZXJhbCAiL3ByaXZhdGUvdmFyL3ByZWZlcmVuY2VzL2NvbS5hcHBsZS5u ZXR3b3JrZXh0ZW5zaW9uLnV1aWRjYWNoZS5wbGlzdCIpCisgICAgICAgIChwcmVmaXggIi9wcml2 YXRlL3Zhci9kYi9jb20uYXBwbGUubmV0d29ya2V4dGVuc2lvbi4iKQorICAgICkKIAogICAgIChh bGxvdyBtYWNoLWxvb2t1cAogICAgICAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5BcHBT U08uc2VydmljZS14cGMiKSkK