232439 2021-10-28 09:54:42 -0700 [iOS][GPUP] Remove read access to preferences 2021-11-09 20:59:18 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham darin gavin.p mazander webkit-bug-importer oldest_to_newest 1809717 0 pvollan 2021-10-28 09:54:42 -0700 Based on telemetry, remove access to reading some preference domains in the GPU process' sandbox on iOS. 1809718 1 webkit-bug-importer 2021-10-28 09:55:31 -0700 <rdar://problem/84762138> 1809721 2 442714 pvollan 2021-10-28 09:58:04 -0700 Created attachment 442714 Patch 1813465 3 442714 pvollan 2021-11-09 20:55:54 -0800 Comment on attachment 442714 Patch Thanks for reviewing! 1813466 4 ews-feeder 2021-11-09 20:59:16 -0800 Committed r285562 (244070@main): <https://commits.webkit.org/244070@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 442714. 442714 2021-10-28 09:58:04 -0700 2021-11-09 20:59:17 -0800 Patch bug-232439-20211028095803.patch text/plain 5873 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODQ5ODgpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE1IEBACisyMDIxLTEwLTI4ICBQZXIgQXJuZSAg PHB2b2xsYW5AYXBwbGUuY29tPgorCisgICAgICAgIFtpT1NdW0dQVVBdIFJlbW92ZSByZWFkIGFj Y2VzcyB0byBwcmVmZXJlbmNlcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9yZy9zaG93 X2J1Zy5jZ2k/aWQ9MjMyNDM5CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS84NDc2MjEzOD4KKwor ICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBCYXNlZCBvbiB0 ZWxlbWV0cnksIHJlbW92ZSBhY2Nlc3MgdG8gcmVhZGluZyBzb21lIHByZWZlcmVuY2UgZG9tYWlu cyBpbiB0aGUgR1BVIHByb2Nlc3MnIHNhbmRib3ggb24gaU9TLgorCisgICAgICAgICogUmVzb3Vy Y2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5HUFUuc2I6CisKIDIwMjEt MTAtMjggIEFkcmlhbiBQZXJleiBkZSBDYXN0cm8gIDxhcGVyZXpAaWdhbGlhLmNvbT4KIAogICAg ICAgICBbV1BFXVtRdF0gU3RyaW5nIG1lbW9yeSBsZWFrIGluIFdQRVF0Vmlldy5jcHAKSW5kZXg6 IFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldl YktpdC5HUFUuc2IKPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJv eFByb2ZpbGVzL2lvcy9jb20uYXBwbGUuV2ViS2l0LkdQVS5zYgkocmV2aXNpb24gMjg0NzgzKQor KysgU291cmNlL1dlYktpdC9SZXNvdXJjZXMvU2FuZGJveFByb2ZpbGVzL2lvcy9jb20uYXBwbGUu V2ViS2l0LkdQVS5zYgkod29ya2luZyBjb3B5KQpAQCAtMTE3LDggKzExNyw3IEBACiAgICAgICAg IDs7IDxyZGFyOi8vcHJvYmxlbS8xMTU2OTEwNj4KICAgICAgICAgKGFsbG93IGZpbGUtcmVhZCog KHdpdGggdGVsZW1ldHJ5KSBhc3NldC1hY2Nlc3MtZmlsdGVyKQogICAgICAgICAoaWYgKG1lbXEg J3dpdGgtbWVkaWEtcGxheWJhY2sgb3B0aW9ucykKLSAgICAgICAgICAgIChwbGF5LW1lZGlhIGFz c2V0LWFjY2Vzcy1maWx0ZXIpKQotICAgICAgICAobW9iaWxlLXByZWZlcmVuY2VzLXJlYWQgImNv bS5hcHBsZS5Nb2JpbGVBc3NldCIpKSkKKyAgICAgICAgICAgIChwbGF5LW1lZGlhIGFzc2V0LWFj Y2Vzcy1maWx0ZXIpKSkpCiAKIChkZWZpbmUtb25jZSAocGxheS1hdWRpbykKICAgICAoYWxsb3cg bWFjaC1sb29rdXAgKHdpdGggdGVsZW1ldHJ5KQpAQCAtMTY5LDggKzE2OCw2IEBACiAgICAgICAg ICJjb20uYXBwbGUuY29yZW1lZGlhIgogICAgICAgICAiY29tLmFwcGxlLmNvcmV2aWRlbyIKICAg ICAgICAgImNvbS5hcHBsZS5pdHVuZXNzdG9yZWQiIDsgTmVlZGVkIGJ5IE1lZGlhUGxheWVyIGZy YW1ld29yawotICAgICAgICAiY29tLmFwcGxlLm1vYmlsZWlwb2QiIDsgRGl0dG8KLSAgICAgICAg ImNvbS5hcHBsZS5hdWRpby52aXJ0dWFsYXVkaW8iIDsgPHJkYXI6Ly9wcm9ibGVtLzU3MTcwMzMz PgogICAgICkKIAogICAgIDs7IEFWRiBuZWVkcyB0byBzZWUgdGhlc2UgbmV0d29yayBwcmVmZXJl bmNlczoKQEAgLTE5Miw4ICsxODksNyBAQAogCiAoZGVmaW5lLW9uY2UgKG1lZGlhLXJlbW90ZSkK ICAgICAobW9iaWxlLXByZWZlcmVuY2VzLXJlYWQKLSAgICAgICAgImNvbS5hcHBsZS5tZWRpYXJl bW90ZSIKLSAgICAgICAgImNvbS5hcHBsZS5tb2JpbGVpcG9kIikKKyAgICAgICAgImNvbS5hcHBs ZS5tZWRpYXJlbW90ZSIpCiAgICAgKGFsbG93IG1hY2gtbG9va3VwICh3aXRoIHRlbGVtZXRyeSkK ICAgICAgICAgICAgKGdsb2JhbC1uYW1lICJjb20uYXBwbGUubWVkaWFyZW1vdGVkLnhwYyIpKQog KQpAQCAtMjM1LDkgKzIzMSw3IEBACiAgICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLmFj Y2Vzc2liaWxpdHkubWVkaWFhY2Nlc3NpYmlsaXR5ZCIpKQogCiAgICAgOzsgPHJkYXI6Ly9wcm9i bGVtLzEyMjUwMTQ1PgotICAgIChtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZCAiY29tLmFwcGxlLm1l ZGlhYWNjZXNzaWJpbGl0eSIpCi0gICAgKG1vYmlsZS1wcmVmZXJlbmNlcy1yZWFkICJjb20uYXBw bGUubWVkaWFhY2Nlc3NpYmlsaXR5LnB1YmxpYyIpCi0pCisgICAgKG1vYmlsZS1wcmVmZXJlbmNl cy1yZWFkICJjb20uYXBwbGUubWVkaWFhY2Nlc3NpYmlsaXR5IikpCiAKIChkZWZpbmUtb25jZSAo dXJsLXRyYW5zbGF0aW9uKQogICAgIDs7IEZvciB0cmFuc2xhdGluZyBodHRwOi8vICYgaHR0cHM6 Ly8gVVJMcyByZWZlcmVuY2luZyBpdG1zOi8vIFVSTHMuCkBAIC0yODYsOSArMjgwLDcgQEAKICAg ICAgICAoeHBjLXNlcnZpY2UtbmFtZSAiY29tLmFwcGxlLk1UTENvbXBpbGVyU2VydmljZSIpKQog ICAgIAogICAgIChtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZAotICAgICAgICAiY29tLmFwcGxlLk1l dGFsIiA7OyA8cmRhcjovL3Byb2JsZW0vMjU1MzU0NzE+Ci0gICAgICAgICJjb20uYXBwbGUub3Bl bmdsIiA7OyA8cmRhcjovL3Byb2JsZW0vMjMzMjE2NzU+Ci0gICAgKQorICAgICAgICAiY29tLmFw cGxlLk1ldGFsIikgOzsgPHJkYXI6Ly9wcm9ibGVtLzI1NTM1NDcxPgogKQogCiAoZGVmaW5lLW9u Y2UgKGludGVybmFsLWRlYnVnZ2luZy1zdXBwb3J0KQpAQCAtMzE4LDEwICszMTAsNyBAQAogICAg ICAgICA7OyA8cmRhcjovL3Byb2JsZW0vODEwNzc1OD4KICAgICAgICAgKGFsbG93IGZpbGUtcmVh ZCogZmlsZS1tYXAtZXhlY3V0YWJsZQogICAgICAgICAgICAgICAgKHN1YnBhdGggIi9TeXN0ZW0v TGlicmFyeS9GcmFtZXdvcmtzIikKLSAgICAgICAgICAgICAgIChzdWJwYXRoICIvU3lzdGVtL0xp YnJhcnkvUHJpdmF0ZUZyYW1ld29ya3MiKSkKLQotICAgICAgICA7OyA8cmRhcjovL3Byb2JsZW0v MzI1NDQ5MjE+Ci0gICAgICAgIChtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZCAiY29tLmFwcGxlLmhh bmd0cmFjZXIiKSkKKyAgICAgICAgICAgICAgIChzdWJwYXRoICIvU3lzdGVtL0xpYnJhcnkvUHJp dmF0ZUZyYW1ld29ya3MiKSkpCiAKIChkZWZpbmUtb25jZSAoZGV2aWNlLWFjY2VzcykKICAgICAo ZGVueSBmaWxlLXJlYWQqIGZpbGUtd3JpdGUqCkBAIC0zNzIsMTMgKzM2MSw3IEBACiA7OyBUaGlu Z3MgcmVxdWlyZWQgYnkgVUlLaXQKIChkZWZpbmUtb25jZSAodWlraXQtcmVxdWlyZW1lbnRzKQog ICAgIChtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZAotICAgICAgICAiY29tLmFwcGxlLlVJS2l0Igot ICAgICAgICAiY29tLmFwcGxlLldlYlVJIgotICAgICAgICAiY29tLmFwcGxlLmFpcnBsYXkiCi0g ICAgICAgICJjb20uYXBwbGUuYXZraXQiCi0gICAgICAgICJjb20uYXBwbGUuY29yZWFuaW1hdGlv biIKLSAgICAgICAgImNvbS5hcHBsZS5tdCIKLSAgICAgICAgImNvbS5hcHBsZS5wcmVmZXJlbmNl cy5zb3VuZHMiKQorICAgICAgICAiY29tLmFwcGxlLmNvcmVhbmltYXRpb24iKQogCiAgICAgKGFs bG93IG1hY2gtbG9va3VwCiAgICAgICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLkNBUmVuZGVy U2VydmVyIikpCkBAIC00MTIsMTEgKzM5NSw2IEBACiAoYWxsb3cgZmlsZS1yZWFkLW1ldGFkYXRh ICh3aXRoIHRlbGVtZXRyeSkKICAgICAodm5vZGUtdHlwZSBESVJFQ1RPUlkpKQogCi0obW9iaWxl LXByZWZlcmVuY2VzLXJlYWQgImNvbS5hcHBsZS5zZWN1cml0eSIpCi0KLSh3aXRoLWZpbHRlciAo c3lzdGVtLWF0dHJpYnV0ZSBhcHBsZS1pbnRlcm5hbCkKLSAgKG1vYmlsZS1wcmVmZXJlbmNlcy1y ZWFkICJjb20uYXBwbGUuUHJvdG90eXBlVG9vbHMiKSkKLQogKHdpdGgtZWxldmF0ZWQtcHJlY2Vk ZW5jZQogICAgIChhbGxvdyBmaWxlLXJlYWQqICh3aXRoIHRlbGVtZXRyeSkKICAgICAgICAgICAg KHN1YnBhdGggIi91c3IvbGliIgpAQCAtNjMxLDggKzYwOSw2IEBACiAoYWxsb3cgbWFjaC1sb29r dXAgKHdpdGggdGVsZW1ldHJ5KQogICAgIChnbG9iYWwtbmFtZSAiY29tLmFwcGxlLlRleHRJbnB1 dCIpKQogCi0obW9iaWxlLXByZWZlcmVuY2VzLXJlYWQgImNvbS5hcHBsZS5kYSIpCi0KIChzcGVl Y2gtc3ludGhlc2lzLWFuZC12b2ljZW92ZXIpCiAKIDs7IFBlcm1pdCByZWFkaW5nIGFzc2V0cyB2 aWEgTW9iaWxlQXNzZXQgZnJhbWV3b3JrLgpAQCAtNjQ2LDE3ICs2MjIsNiBAQAogKGFsbG93IGZp bGUtcmVhZCogKHdpdGggdGVsZW1ldHJ5KQogICAgIChob21lLXN1YnBhdGggIi9MaWJyYXJ5L0Nh Y2hlcy9jb20uYXBwbGUua2V5Ym9hcmRzIikpCiAKLShtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZAot ICAgICJjb20uYXBwbGUuRW1vamlQcmVmZXJlbmNlcyIKLSAgICA7IDxyZGFyOi8vcHJvYmxlbS84 NDc3NTk2PiBjb20uYXBwbGUuSW5wdXRNb2RlUHJlZmVyZW5jZXMKLSAgICAiY29tLmFwcGxlLklu cHV0TW9kZVByZWZlcmVuY2VzIgotICAgIDsgPHJkYXI6Ly9wcm9ibGVtLzgyMDY2MzI+IFdlYXRo ZXIoMTAzOCkgZGVueSBmaWxlLXJlYWQtZGF0YSB+L0xpYnJhcnkvUHJlZmVyZW5jZXMvY29tLmFw cGxlLmtleWJvYXJkLnBsaXN0Ci0gICAgImNvbS5hcHBsZS5rZXlib2FyZCIKLSAgICA7IDxyZGFy Oi8vcHJvYmxlbS85Mzg0MDg1PgotICAgICJjb20uYXBwbGUuUHJlZmVyZW5jZXMiCi0gICAgImNv bS5hcHBsZS5sb29rdXAuc2hhcmVkIiA7IE5lZWRlZCBmb3IgRGF0YURldGVjdG9yIChTcG90bGln aHQpIHN1cHBvcnQKLSkKLQogOzsgU2lsZW50bHkgZGVueSB1bm5lY2Vzc2FyeSBhY2Nlc3NlcyBj YXVzZWQgYnkgTWVzc2FnZVVJIGZyYW1ld29yay4KIDs7IFRoaXMgY2FuIGJlIHJlbW92ZWQgb25j ZSA8cmRhcjovL3Byb2JsZW0vNDcwMzgxMDI+IGlzIHJlc29sdmVkLgogKGRlbnkgZmlsZS1yZWFk KgpAQCAtNzAzLDE1ICs2NjgsMTAgQEAKICAgICAoaG9tZS1wcmVmaXggIi9MaWJyYXJ5L1ByZWZl cmVuY2VzL2NvbS5hcHBsZS5zcHJpbmdib2FyZC5wbGlzdCIpCiAgICAgKHdpdGggbm8tbG9nKSkK IAotOzsgPHJkYXI6Ly9wcm9ibGVtLzM0OTg2MzE0PgotKG1vYmlsZS1wcmVmZXJlbmNlcy1yZWFk ICJjb20uYXBwbGUuaW5kaWdvIikKLQogOzs7CiA7OzsgRW5kIFVJS2l0LWFwcHMuc2IgY29udGVu dAogOzs7CiAKLShtb2JpbGUtcHJlZmVyZW5jZXMtcmVhZCAiY29tLmFwcGxlLkFkTGliLnBsaXN0 IikKLQogKGRlbnkgc3lzY3RsKikKIChhbGxvdyBzeXNjdGwtcmVhZCAod2l0aCB0ZWxlbWV0cnkp CiAgICAgKHN5c2N0bC1uYW1lCkBAIC04NDEsMTEgKzgwMSw3IEBACiAKIDs7IFJlYWQtb25seSBw cmVmZXJlbmNlcyBhbmQgZGF0YQogKG1vYmlsZS1wcmVmZXJlbmNlcy1yZWFkCi0gICAgImNvbS5h cHBsZS5MYXVuY2hTZXJ2aWNlcyIKLSAgICAiY29tLmFwcGxlLldlYkZvdW5kYXRpb24iCi0gICAg ImNvbS5hcHBsZS5hdmZvdW5kYXRpb24uZnJlY2VudHMiIDs7IDxyZGFyOi8vcHJvYmxlbS8zMzEz NzAyOT4KLSAgICAiY29tLmFwcGxlLmF2Zm91bmRhdGlvbi52aWRlb3BlcmZvcm1hbmNlaHVkIiA7 OyA8cmRhcjovL3Byb2JsZW0vMzE1OTQ1Njg+Ci0gICAgImNvbS5hcHBsZS52b2ljZXNlcnZpY2Vz LmxvZ2dpbmciKQorICAgICJjb20uYXBwbGUuYXZmb3VuZGF0aW9uLnZpZGVvcGVyZm9ybWFuY2Vo dWQiKSA7OyA8cmRhcjovL3Byb2JsZW0vMzE1OTQ1Njg+CiAKIDs7IFNhbmRib3ggZXh0ZW5zaW9u cwogKGRlZmluZSAoYXBwbHktcmVhZC1hbmQtaXNzdWUtZXh0ZW5zaW9uIG9wIHBhdGgtZmlsdGVy KQo=