232245 2021-10-25 09:34:11 -0700 [macOS][GPUP] Remove sandbox read access to files 2021-11-08 14:52:45 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham gavin.p mazander webkit-bug-importer oldest_to_newest 1808427 0 pvollan 2021-10-25 09:34:11 -0700 Based on telemetry, remove sandbox read access to files in the GPU process on macOS. 1808428 1 webkit-bug-importer 2021-10-25 09:34:44 -0700 <rdar://problem/84617482> 1808429 2 442378 pvollan 2021-10-25 09:38:04 -0700 Created attachment 442378 Patch 1808441 3 442378 bfulgham 2021-10-25 10:05:18 -0700 Comment on attachment 442378 Patch r=me 1812850 4 442378 pvollan 2021-11-08 14:49:50 -0800 Comment on attachment 442378 Patch Thanks for reviewing! 1812851 5 ews-feeder 2021-11-08 14:52:43 -0800 Committed r285434 (243990@main): <https://commits.webkit.org/243990@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 442378. 442378 2021-10-25 09:38:04 -0700 2021-11-08 14:52:44 -0800 Patch bug-232245-20211025093803.patch text/plain 7389 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODQ3ODcpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTEwLTI1ICBQZXIgQXJuZSAg PHB2b2xsYW5AYXBwbGUuY29tPgorCisgICAgICAgIFttYWNPU11bR1BVUF0gUmVtb3ZlIHNhbmRi b3ggcmVhZCBhY2Nlc3MgdG8gZmlsZXMKKyAgICAgICAgaHR0cHM6Ly9idWdzLndlYmtpdC5vcmcv c2hvd19idWcuY2dpP2lkPTIzMjI0NQorICAgICAgICA8cmRhcjovL3Byb2JsZW0vODQ2MTc0ODI+ CisKKyAgICAgICAgUmV2aWV3ZWQgYnkgTk9CT0RZIChPT1BTISkuCisKKyAgICAgICAgQmFzZWQg b24gdGVsZW1ldHJ5LCByZW1vdmUgc2FuZGJveCByZWFkIGFjY2VzcyB0byBmaWxlcyBpbiB0aGUg R1BVIHByb2Nlc3Mgb24gbWFjT1MuCisKKyAgICAgICAgKiBHUFVQcm9jZXNzL21hYy9jb20uYXBw bGUuV2ViS2l0LkdQVVByb2Nlc3Muc2IuaW46CisKIDIwMjEtMTAtMjUgIFdlbnNvbiBIc2llaCAg PHdlbnNvbl9oc2llaEBhcHBsZS5jb20+CiAKICAgICAgICAgUkVHUkVTU0lPTiAocjI4NDA3OSk6 IEF1ZGlvIGNvbnRpbnVlcyBwbGF5aW5nIG9uIGh1bHUuY29tIGluIHByaXZhdGUgYnJvd3Npbmcg bW9kZSBhZnRlciBjbG9zaW5nIHRoZSB0YWIKSW5kZXg6IFNvdXJjZS9XZWJLaXQvR1BVUHJvY2Vz cy9tYWMvY29tLmFwcGxlLldlYktpdC5HUFVQcm9jZXNzLnNiLmluCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNv dXJjZS9XZWJLaXQvR1BVUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5HUFVQcm9jZXNzLnNi LmluCShyZXZpc2lvbiAyODQ3ODMpCisrKyBTb3VyY2UvV2ViS2l0L0dQVVByb2Nlc3MvbWFjL2Nv bS5hcHBsZS5XZWJLaXQuR1BVUHJvY2Vzcy5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtNDYsMTAg KzQ2LDkgQEAKICAgICAgICAgKGZpbGUtbW9kZSAjbzAwMDQpCiAgICAgICAgIChzdWJwYXRoICIv U3lzdGVtIikpKQogCi0oYWxsb3cgZmlsZS1yZWFkKiAod2l0aCB0ZWxlbWV0cnkpCisoYWxsb3cg ZmlsZS1yZWFkKgogICAgIChyZXF1aXJlLWFsbCAoZmlsZS1tb2RlICNvMDAwNCkKLSAgICAocmVx dWlyZS1hbnkgKHN1YnBhdGggIi9MaWJyYXJ5L0ZpbGVzeXN0ZW1zL05ldEZTUGx1Z2lucyIpCi0g ICAgKHN1YnBhdGggIi9MaWJyYXJ5L0FwcGxlL1N5c3RlbSIpCisgICAgKHJlcXVpcmUtYW55CiAg ICAgKHN1YnBhdGggIi9MaWJyYXJ5L1ByZWZlcmVuY2VzL0xvZ2dpbmciKSAgICAgIDsgTG9nZ2lu ZyBSZXRoaW5rCiAjaWYgX19NQUNfT1NfWF9WRVJTSU9OX01JTl9SRVFVSVJFRCA8IDExMDAwMAog ICAgIChzdWJwYXRoICIvcHJpdmF0ZS92YXIvZGIvZHlsZCIpCkBAIC01OCwxMiArNTcsNiBAQAog ICAgIChzdWJwYXRoICIvdXNyL2xpYiIpCiAgICAgKHN1YnBhdGggIi91c3Ivc2hhcmUiKSkpKQog Ci07OzsgQWxsb3cgcmVhZGluZyBpbnRlcm5hbCBwcm9maWxlcyBvbiBkZXZlbG9wbWVudCBidWls ZHMKLShhbGxvdyBmaWxlLXJlYWQqICh3aXRoIHRlbGVtZXRyeSkKLSAgICAocmVxdWlyZS1hbGwg KGZpbGUtbW9kZSAjbzAwMDQpCi0gICAgKHN1YnBhdGggIi9BcHBsZUludGVybmFsL0xpYnJhcnkv UHJlZmVyZW5jZXMvTG9nZ2luZyIpCi0gICAgKHN5c3RlbS1hdHRyaWJ1dGUgYXBwbGUtaW50ZXJu YWwpKSkKLQogOzs7IEFsbG93IG1hcHBpbmcgb2Ygc3lzdGVtIGZyYW1ld29ya3MgKyBkeWxpYnMK IChhbGxvdyBmaWxlLW1hcC1leGVjdXRhYmxlICh3aXRoIHRlbGVtZXRyeSkKICAgICAoc3VicGF0 aCAiL0xpYnJhcnkvQXBwbGUvU3lzdGVtL0xpYnJhcnkvRnJhbWV3b3JrcyIpCkBAIC03NSwyMyAr NjgsMTcgQEAKICkKIAogKGFsbG93IGZpbGUtcmVhZC1tZXRhZGF0YQotICAgIChsaXRlcmFsICIv dmFyIikpCi0oYWxsb3cgZmlsZS1yZWFkLW1ldGFkYXRhICh3aXRoIHRlbGVtZXRyeSkKKyAgICAo bGl0ZXJhbCAiL3ZhciIpCiAgICAgKGxpdGVyYWwgIi9ldGMiKQogICAgIChsaXRlcmFsICIvdG1w IikKICAgICAobGl0ZXJhbCAiL3ByaXZhdGUvZXRjL2xvY2FsdGltZSIpKQogCi0KIDs7OyBBbGxv dyBhY2Nlc3MgdG8gc3RhbmRhcmQgc3BlY2lhbCBmaWxlcy4KLShhbGxvdyBmaWxlLXJlYWQqICh3 aXRoIHRlbGVtZXRyeSkKLSAgICAobGl0ZXJhbCAiL2Rldi9hdXRvZnNfbm93YWl0IikKKyhhbGxv dyBmaWxlLXJlYWQqCiAgICAgKGxpdGVyYWwgIi9kZXYvcmFuZG9tIikKLSAgICAobGl0ZXJhbCAi L2Rldi91cmFuZG9tIikKLSAgICAobGl0ZXJhbCAiL3ByaXZhdGUvZXRjL21hc3Rlci5wYXNzd2Qi KQogICAgIChsaXRlcmFsICIvcHJpdmF0ZS9ldGMvcGFzc3dkIikpCiAKLShhbGxvdyBmaWxlLXJl YWQqCi0gICAgICAgZmlsZS13cml0ZS1kYXRhICh3aXRoIHRlbGVtZXRyeSkKKyhhbGxvdyBmaWxl LXdyaXRlLWRhdGEgKHdpdGggdGVsZW1ldHJ5KQogICAgIChsaXRlcmFsICIvZGV2L251bGwiKQog ICAgIChsaXRlcmFsICIvZGV2L3plcm8iKSkKIApAQCAtNjA1LDI5ICs1OTIsMTYgQEAKICAgICAq dXVpZC1wYXR0ZXJuKikKIAogOzsgUmVhZC1vbmx5IHByZWZlcmVuY2VzIGFuZCBkYXRhCi0oYWxs b3cgZmlsZS1yZWFkKiAod2l0aCB0ZWxlbWV0cnkpCisoYWxsb3cgZmlsZS1yZWFkKgogICAgIDs7 IEJhc2ljIHN5c3RlbSBwYXRocwotICAgIChzdWJwYXRoICIvTGlicmFyeS9EaWN0aW9uYXJpZXMi KQorICAgIChzdWJwYXRoICIvTGlicmFyeS9BdWRpby9QbHVnLUlucy9IQUwiKQogICAgIChzdWJw YXRoICIvTGlicmFyeS9Gb250cyIpCi0gICAgKHN1YnBhdGggIi9MaWJyYXJ5L0ZyYW1ld29ya3Mi KQogICAgIChzdWJwYXRoICIvTGlicmFyeS9NYW5hZ2VkIFByZWZlcmVuY2VzIikKLSAgICAoc3Vi cGF0aCAiL0xpYnJhcnkvU3BlZWNoL1N5bnRoZXNpemVycyIpCi0gICAgKHJlZ2V4ICMiXi9wcml2 YXRlL2V0Yy8oaG9zdHN8Z3JvdXB8cGFzc3dkKSQiKQotCi0gICAgOzsgU3lzdGVtIGFuZCB1c2Vy IHByZWZlcmVuY2VzCi0gICAgKGhvbWUtbGl0ZXJhbCAiLy5DRlVzZXJUZXh0RW5jb2RpbmciKQot CiAgICAgOzsgRklYTUU6IFRoaXMgc2hvdWxkIGJlIHJlbW92ZWQgd2hlbiA8cmRhcjovL3Byb2Js ZW0vODk1Nzg0NT4gaXMgZml4ZWQuCi0gICAgKGhvbWUtc3VicGF0aCAiL0xpYnJhcnkvRm9udHMi KQotCi0gICAgKHN1YnBhdGggIi9MaWJyYXJ5L0F1ZGlvL1BsdWctSW5zL0hBTCIpCisgICAgKGhv bWUtc3VicGF0aCAiL0xpYnJhcnkvRm9udHMiKSkKIAotICAgIChob21lLXN1YnBhdGggIi9MaWJy YXJ5L0RpY3Rpb25hcmllcyIpKQotCi0oYWxsb3cgZmlsZS1yZWFkLWRhdGEgKHdpdGggdGVsZW1l dHJ5KQotICAgIChsaXRlcmFsICIvdXNyL2xvY2FsL2xpYi9sb2ciKSA7IDxyZGFyOi8vcHJvYmxl bS8zNjYyOTQ5NT4KLSAgICA7OyBOZWVkZWQgZm9yIEFFUzMgc3VwcG9ydAotICAgIChzdWJwYXRo ICIvTGlicmFyeS9BdWRpby9QbHVnLUlucy9Db21wb25lbnRzIikpCisoYWxsb3cgZmlsZS1yZWFk LWRhdGEKKyAgICAobGl0ZXJhbCAiL3Vzci9sb2NhbC9saWIvbG9nIikpIDsgPHJkYXI6Ly9wcm9i bGVtLzM2NjI5NDk1PgogCiA7OyBQcmVmZXJlbmNlcyBzdXBwb3J0CiAoc2hhcmVkLXByZWZlcmVu Y2VzLXJlYWQKQEAgLTY2NiwxMCArNjQwLDYgQEAKIDs7IGFuZCB0byBhbGxvdyBpc3N1aW5nIGV4 dGVuc2lvbnMuCiAoYWxsb3ctcmVhZC1kaXJlY3RvcnktYW5kLWlzc3VlLXJlYWQtZXh0ZW5zaW9u cyAocGFyYW0gIldFQktJVDJfRlJBTUVXT1JLX0RJUiIpKQogCi07OyBBbGxvdyBpc3N1aW5nIGV4 dGVuc2lvbnMgdG8gc3lzdGVtIGxpYnJhcmllcyB0aGF0IHRoZSBOZXR3b3JrIHByb2Nlc3MgY2Fu IGFscmVhZHkgcmVhZC4KLTs7IFRoaXMgaXMgdG8gYXZvaWQgd2FybmluZ3MgYXR0ZW1wdGluZyB0 byBjcmVhdGUgZXh0ZW5zaW9ucyBmb3IgdGhlc2UgcmVzb3VyY2VzLgotKGFsbG93LXJlYWQtZGly ZWN0b3J5LWFuZC1pc3N1ZS1yZWFkLWV4dGVuc2lvbnMgIi9TeXN0ZW0vTGlicmFyeS9Qcml2YXRl RnJhbWV3b3Jrcy9XZWJJbnNwZWN0b3JVSS5mcmFtZXdvcmsiKQotCiA7OyBTYW5kYm94IGV4dGVu c2lvbnMKIChkZWZpbmUgKGFwcGx5LXJlYWQtYW5kLWlzc3VlLWV4dGVuc2lvbiBvcCBwYXRoLWZp bHRlcikKICAgICAob3AgZmlsZS1yZWFkKiAod2l0aCB0ZWxlbWV0cnkpIHBhdGgtZmlsdGVyKQpA QCAtNzc5LDE1ICs3NDksMTQgQEAKICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5TZWN1cml0 eVNlcnZlciIpCiAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUub2NzcGQiKSkKIAotKGFsbG93 IGZpbGUtcmVhZCogKHdpdGggdGVsZW1ldHJ5KSAoc3VicGF0aCAiL3ByaXZhdGUvdmFyL2RiL21k cy9zeXN0ZW0iKSkgOzsgRklYTUU6IFRoaXMgc2hvdWxkIGJlIHJlbW92ZWQgd2hlbiA8cmRhcjov L3Byb2JsZW0vOTUzODQxND4gaXMgZml4ZWQuCisoYWxsb3cgZmlsZS1yZWFkKiAoc3VicGF0aCAi L3ByaXZhdGUvdmFyL2RiL21kcy9zeXN0ZW0iKSkgOzsgRklYTUU6IFRoaXMgc2hvdWxkIGJlIHJl bW92ZWQgd2hlbiA8cmRhcjovL3Byb2JsZW0vOTUzODQxND4gaXMgZml4ZWQuCiAod2l0aC1maWx0 ZXIgKHVpZCAwKQogICAgIChhbGxvdyBmaWxlLXdyaXRlKiAod2l0aCB0ZWxlbWV0cnkpCiAgICAg ICAgIChzdWJwYXRoICIvcHJpdmF0ZS92YXIvZGIvbWRzL3N5c3RlbSIpKSA7OyBGSVhNRTogVGhp cyBzaG91bGQgYmUgcmVtb3ZlZCB3aGVuIDxyZGFyOi8vcHJvYmxlbS85NTM4NDE0PiBpcyBmaXhl ZC4KICkKIAotKGFsbG93IGZpbGUtcmVhZCogKHdpdGggdGVsZW1ldHJ5KQotICAgICAgIChzdWJw YXRoICIvcHJpdmF0ZS92YXIvZGIvbWRzIikKLSAgICAgICAobGl0ZXJhbCAiL3ByaXZhdGUvdmFy L2RiL0RldGFjaGVkU2lnbmF0dXJlcyIpKQorKGFsbG93IGZpbGUtcmVhZCoKKyAgICAoc3VicGF0 aCAiL3ByaXZhdGUvdmFyL2RiL21kcyIpKQogCiAoYWxsb3cgaXBjLXBvc2l4LXNobS1yZWFkKiBp cGMtcG9zaXgtc2htLXdyaXRlLWRhdGEgaXBjLXBvc2l4LXNobS13cml0ZS1jcmVhdGUgKHdpdGgg dGVsZW1ldHJ5KQogICAgICAgIChpcGMtcG9zaXgtbmFtZSAiY29tLmFwcGxlLkFwcGxlRGF0YWJh c2VDaGFuZ2VkIikpCkBAIC04MDAsOCArNzY5LDYgQEAKICNlbmRpZgogKQogCi0oYWxsb3cgZmls ZS1yZWFkLWRhdGEgKHdpdGggdGVsZW1ldHJ5KQotICAgIChsaXRlcmFsICIvZGV2L2F1dG9mc19u b3dhaXQiKSkgOyBVc2VkIGJ5IENGIHRvIGNpcmN1bXZlbnQgYXV0b21vdW50IHRyaWdnZXJzCiAo YWxsb3cgaXBjLXBvc2l4LXNobSAod2l0aCB0ZWxlbWV0cnkpCiAgICAgKGlwYy1wb3NpeC1uYW1l LXByZWZpeCAiQ0ZQQlM6IikpIDsgPHJkYXI6Ly9wcm9ibGVtLzEzNzU3NDc1PgogKGFsbG93IHN5 c3RlbS1mc2N0bCAod2l0aCB0ZWxlbWV0cnkpIChmc2N0bC1jb21tYW5kIChfSU8gImgiIDQ3KSkp CkBAIC04MjUsNyArNzkyLDcgQEAKICkKIAogOzsgQ0ZOZXR3b3JrCi0oYWxsb3cgZmlsZS1yZWFk LWRhdGEgKHdpdGggdGVsZW1ldHJ5KSAocGF0aCAiL3ByaXZhdGUvdmFyL2RiL25zdXJsc3RvcmFn ZWQvZGFmc2FEYXRhLmJpbiIpKQorKGFsbG93IGZpbGUtcmVhZC1kYXRhIChwYXRoICIvcHJpdmF0 ZS92YXIvZGIvbnN1cmxzdG9yYWdlZC9kYWZzYURhdGEuYmluIikpCiAKICNpZiBQTEFURk9STShN QUMpCiA7OyBGSVhNRSBzaG91bGQgYmUgcmVtb3ZlZCB3aGVuIDxyZGFyOi8vcHJvYmxlbS85MzQ3 MjA1PiArIHJlbGF0ZWQgcmFkYXIgaW4gU2FmYXJpIGlzIGZpeGVkCkBAIC04NTYsMTYgKzgyMyw2 IEBACiAgICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUuY29yZXNlcnZpY2VzLmFwcGxlZXZl bnRzIikKICAgICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5wYXN0ZWJvYXJkLjEiKQogICAg ICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLnNwZWVjaC5yZWNvZ25pdGlvbnNlcnZlciIpKQot I2lmIFBMQVRGT1JNKE1BQykKLTs7IEFsc28gcGFydCBvZiB1bm5lY2Vzc2FyeSBOU0FwcGxpY2F0 aW9uIGluaXRpYWxpemF0aW9uLCBidXQgd2UgY2FuJ3QgYmxvY2sgYWNjZXNzIHRvIHRoZXNlIHll dCwgc2VlIDxyZGFyOi8vcHJvYmxlbS8xMzg2OTc2NT4uCi0oYWxsb3cgZmlsZS1yZWFkKiAod2l0 aCB0ZWxlbWV0cnkpCi0gICAgICAgKHN1YnBhdGggIi9MaWJyYXJ5L0NvbXBvbmVudHMiKQotICAg ICAgIChzdWJwYXRoICIvTGlicmFyeS9LZXlib2FyZCBMYXlvdXRzIikKLSAgICAgICAoc3VicGF0 aCAiL0xpYnJhcnkvSW5wdXQgTWV0aG9kcyIpCi0gICAgICAgKGhvbWUtc3VicGF0aCAiL0xpYnJh cnkvQ29tcG9uZW50cyIpCi0gICAgICAgKGhvbWUtc3VicGF0aCAiL0xpYnJhcnkvS2V5Ym9hcmQg TGF5b3V0cyIpCi0gICAgICAgKGhvbWUtc3VicGF0aCAiL0xpYnJhcnkvSW5wdXQgTWV0aG9kcyIp KQotI2VuZGlmCiAKIDs7IEFpclBsYXkKIChhbGxvdyBtYWNoLWxvb2t1cApAQCAtODg0LDkgKzg0 MSw2IEBACiAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUuY29yZW1lZGlhLnZvbHVtZWNvbnRy b2xsZXIueHBjIikKICkKIAotOzsgRGF0YSBEZXRlY3RvcnMKLShhbGxvdyBmaWxlLXJlYWQqICh3 aXRoIHRlbGVtZXRyeSkgKHN1YnBhdGggIi9wcml2YXRlL3Zhci9kYi9kYXRhZGV0ZWN0b3JzL3N5 cyIpKQotCiAjaWYgUExBVEZPUk0oTUFDKQogOzsgTWVkaWEgY2FwdHVyZSwgdXRpbGl0aWVzCiAo aWYgKG5vdCAoZGVmaW5lZD8gJ3NicGwtZmlsdGVyPykpCkBAIC05MzYsNyArODkwLDcgQEAKICh3 aXRoLWZpbHRlciAoZXh0ZW5zaW9uICJjb20uYXBwbGUud2Via2l0LmNhbWVyYSIpCiAgICAgKHNo YXJlZC1wcmVmZXJlbmNlcy1yZWFkICJjb20uYXBwbGUuY21pbyIpCiAgICAgKHNoYXJlZC1wcmVm ZXJlbmNlcy1yZWFkICJjb20uYXBwbGUuY29yZW1lZGlhIikKLSAgICAoYWxsb3cgZmlsZS1yZWFk KiAod2l0aCB0ZWxlbWV0cnkpIChzdWJwYXRoICIvTGlicmFyeS9Db3JlTWVkaWFJTy9QbHVnLUlu cy9EQUwiKSkKKyAgICAoYWxsb3cgZmlsZS1yZWFkKiAoc3VicGF0aCAiL0xpYnJhcnkvQ29yZU1l ZGlhSU8vUGx1Zy1JbnMvREFMIikpCiAgICAgKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVt ZXRyeSkgKGV4dGVuc2lvbiAiY29tLmFwcGxlLmFwcC1zYW5kYm94Lm1hY2giKSkKICAgICAoYWxs b3cgbWFjaC1sb29rdXAgKHdpdGggdGVsZW1ldHJ5KQogICAgICAgICAoZ2xvYmFsLW5hbWUgImNv bS5hcHBsZS5jbWlvLkFwcGxlQ2FtZXJhQXNzaXN0YW50IikK