233866 2021-12-05 23:54:29 -0800 [iOS][WP] Block access to unused IOKit class 2021-12-06 11:45:39 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan webkit-unassigned bfulgham gavin.p mazander webkit-bug-importer oldest_to_newest 1820543 0 pvollan 2021-12-05 23:54:29 -0800 Block access to IOKit class IOMobileFramebufferUserClient in the WebContent process' sandbox on iOS, which is unused according to telemetry. 1820544 1 webkit-bug-importer 2021-12-05 23:55:06 -0800 <rdar://problem/86086475> 1820550 2 446009 pvollan 2021-12-06 00:44:46 -0800 Created attachment 446009 Patch 1820551 3 446010 pvollan 2021-12-06 00:47:03 -0800 Created attachment 446010 Patch 1820683 4 446010 bfulgham 2021-12-06 11:21:25 -0800 Comment on attachment 446010 Patch r=me. Nice improvement! 1820685 5 pvollan 2021-12-06 11:23:51 -0800 (In reply to Brent Fulgham from comment #4) > Comment on attachment 446010 [details] > Patch > > r=me. Nice improvement! Thanks for reviewing! 1820698 6 ews-feeder 2021-12-06 11:45:37 -0800 Committed r286557 (244887@main): <https://commits.webkit.org/244887@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 446010. 446009 2021-12-06 00:44:46 -0800 2021-12-06 00:46:37 -0800 Patch 233866.patch text/plain 3330 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODY1NDEpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDIxLTEyLTA2ICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXVtXUF0gQmxvY2sgYWNj ZXNzIHRvIHVudXNlZCBJT0tpdCBjbGFzcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9y Zy9zaG93X2J1Zy5jZ2k/aWQ9MjMzODY2CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS84NjA4NjQ3 NT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBCbG9j ayBhY2Nlc3MgdG8gSU9LaXQgY2xhc3MgSU9Nb2JpbGVGcmFtZWJ1ZmZlclVzZXJDbGllbnQgaW4g dGhlIFdlYkNvbnRlbnQgcHJvY2Vzcycgc2FuZGJveCBvbiBpT1MsCisgICAgICAgIHdoaWNoIGlz IHVudXNlZCBhY2NvcmRpbmcgdG8gdGVsZW1ldHJ5LgorCisgICAgICAgICogUmVzb3VyY2VzL1Nh bmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmluOgorICAg ICAgICAqIFVJUHJvY2Vzcy9XZWJQYWdlUHJveHkuY3BwOgorICAgICAgICAoV2ViS2l0OjpncHVJ T0tpdENsYXNzZXMpOgorCiAyMDIxLTEyLTA1ICBTYWlkIEFib3UtSGFsbGF3YSAgPHNhaWRAYXBw bGUuY29tPgogCiAgICAgICAgIFtHUFUgUHJvY2Vzc10gQWRkIHRoZSBlbmNvZGluZy9kZWNvZGlu ZyBmb3IgRmlsdGVyIGFuZCBGaWx0ZXJFZmZlY3QKSW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVzb3Vy Y2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmlu Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9p b3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmluCShyZXZpc2lvbiAyODYwMjUpCisr KyBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5X ZWJLaXQuV2ViQ29udGVudC5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtOTIsMzAgKzkyLDEyIEBA CiAgICAgICAgIGRvbWFpbnMpKQogCiAoZGVmaW5lLW9uY2UgKGZyYW1lYnVmZmVyLWFjY2VzcykK LSAgICAoYWxsb3cgaW9raXQtb3BlbgotICAgICAgICAocmVxdWlyZS1hbGwKLSAgICAgICAgICAg IChleHRlbnNpb24gImNvbS5hcHBsZS53ZWJraXQuZXh0ZW5zaW9uLmlva2l0IikKLSAgICAgICAg ICAgIChpb2tpdC11c2VyLWNsaWVudC1jbGFzcyAiSU9Nb2JpbGVGcmFtZWJ1ZmZlclVzZXJDbGll bnQiKQotICAgICAgICApCi0gICAgICAgICh3aGVuIChkZWZpbmVkPyAnaW9raXQtZXh0ZXJuYWwt bWV0aG9kKQotICAgICAgICAgICAgKGFwcGx5LW1lc3NhZ2UtZmlsdGVyCi0gICAgICAgICAgICAg ICAgKGRlbnkgKHdpdGggdGVsZW1ldHJ5KQotICAgICAgICAgICAgICAgICAgICBpb2tpdC1hc3lu Yy1leHRlcm5hbC1tZXRob2QKLSAgICAgICAgICAgICAgICAgICAgaW9raXQtZXh0ZXJuYWwtbWV0 aG9kCi0gICAgICAgICAgICAgICAgICAgIGlva2l0LWV4dGVybmFsLXRyYXApCi0gICAgICAgICAg ICAgICAgKGFsbG93ICh3aXRoIHRlbGVtZXRyeSkgaW9raXQtZXh0ZXJuYWwtbWV0aG9kCi0gICAg ICAgICAgICAgICAgICAgIChpb2tpdC1tZXRob2QtbnVtYmVyCi0gICAgICAgICAgICAgICAgICAg ICAgICA4Ci0gICAgICAgICAgICAgICAgICAgICAgICAyOAotICAgICAgICAgICAgICAgICAgICAp Ci0gICAgICAgICAgICAgICAgKQotICAgICAgICAgICAgKQotICAgICAgICApCi0gICAgKQorICAg IChkZW55IGlva2l0LW9wZW4gKHdpdGggdGVsZW1ldHJ5LWJhY2t0cmFjZSkKKyAgICAgICAgKGlv a2l0LXVzZXItY2xpZW50LWNsYXNzICJJT01vYmlsZUZyYW1lYnVmZmVyVXNlckNsaWVudCIpKQog CiAgICAgOyBJT01vYmlsZUZyYW1lYnVmZmVyCiAgICAgKHdpdGgtZmlsdGVyIChpb2tpdC1yZWdp c3RyeS1lbnRyeS1jbGFzcyAiSU9Nb2JpbGVGcmFtZWJ1ZmZlciIpCi0gICAgICAgIChhbGxvdyBp b2tpdC1nZXQtcHJvcGVydGllcworICAgICAgICAoYWxsb3cgaW9raXQtZ2V0LXByb3BlcnRpZXMg KHdpdGggdGVsZW1ldHJ5KQogICAgICAgICAgICAgICAgKGlva2l0LXByb3BlcnR5ICJBcHBsZVRW IgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJEaXNwbGF5UGlwZVBsYW5lQmFzZUFs aWdubWVudCIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiRGlzcGxheVBpcGVTdHJp ZGVSZXF1aXJlbWVudHMiCkluZGV4OiBTb3VyY2UvV2ViS2l0L1VJUHJvY2Vzcy9XZWJQYWdlUHJv eHkuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL1dlYlBhZ2VQcm94 eS5jcHAJKHJldmlzaW9uIDI4NjAyNSkKKysrIFNvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL1dlYlBh Z2VQcm94eS5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTgwMTEsNyArODAxMSw3IEBACiAjaWYgUExB VEZPUk0oSU9TX0ZBTUlMWSkKICAgICAgICAgIkFHWERldmljZVVzZXJDbGllbnQiX3MsCiAgICAg ICAgICJJT0dQVSJfcywKLSAgICAgICAgIklPU3VyZmFjZVJvb3RVc2VyQ2xpZW50Il9zLAorICAg ICAgICAiSU9TdXJmYWNlQWNjZWxlcmF0b3JDbGllbnQiX3MsCiAjZW5kaWYKICNpZiBQTEFURk9S TShNQUMpIHx8IFBMQVRGT1JNKE1BQ0NBVEFMWVNUKQogICAgICAgICAiQUdQTUNsaWVudCJfcywK QEAgLTgwMjgsOCArODAyOCwxMCBAQAogICAgICAgICAiSU9BdWRpb0VuZ2luZVVzZXJDbGllbnQi X3MsCiAgICAgICAgICJJT1N1cmZhY2VSb290VXNlckNsaWVudCJfcywKICNlbmRpZgotI2lmIChQ TEFURk9STShNQUMpICYmIENQVShBUk02NCkpIHx8IFBMQVRGT1JNKElPU19GQU1JTFkpCisjaWYg UExBVEZPUk0oTUFDKSAmJiBDUFUoQVJNNjQpCiAgICAgICAgICJJT01vYmlsZUZyYW1lYnVmZmVy VXNlckNsaWVudCJfcywKKyNlbmRpZgorI2lmIFBMQVRGT1JNKE1BQykgJiYgQ1BVKEFSTTY0KSB8 fCBQTEFURk9STShJT1NfRkFNSUxZKQogICAgICAgICAiSU9TdXJmYWNlQWNjZWxlcmF0b3JDbGll bnQiX3MsCiAjZW5kaWYKICAgICB9KTsK 446010 2021-12-06 00:47:03 -0800 2021-12-06 11:45:38 -0800 Patch 233866.patch text/plain 3072 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyODY1NDEpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE4IEBACisyMDIxLTEyLTA2ICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXVtXUF0gQmxvY2sgYWNj ZXNzIHRvIHVudXNlZCBJT0tpdCBjbGFzcworICAgICAgICBodHRwczovL2J1Z3Mud2Via2l0Lm9y Zy9zaG93X2J1Zy5jZ2k/aWQ9MjMzODY2CisgICAgICAgIDxyZGFyOi8vcHJvYmxlbS84NjA4NjQ3 NT4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBCbG9j ayBhY2Nlc3MgdG8gSU9LaXQgY2xhc3MgSU9Nb2JpbGVGcmFtZWJ1ZmZlclVzZXJDbGllbnQgaW4g dGhlIFdlYkNvbnRlbnQgcHJvY2Vzcycgc2FuZGJveCBvbiBpT1MsCisgICAgICAgIHdoaWNoIGlz IHVudXNlZCBhY2NvcmRpbmcgdG8gdGVsZW1ldHJ5LgorCisgICAgICAgICogUmVzb3VyY2VzL1Nh bmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmluOgorICAg ICAgICAqIFVJUHJvY2Vzcy9XZWJQYWdlUHJveHkuY3BwOgorICAgICAgICAoV2ViS2l0OjpncHVJ T0tpdENsYXNzZXMpOgorCiAyMDIxLTEyLTA1ICBTYWlkIEFib3UtSGFsbGF3YSAgPHNhaWRAYXBw bGUuY29tPgogCiAgICAgICAgIFtHUFUgUHJvY2Vzc10gQWRkIHRoZSBlbmNvZGluZy9kZWNvZGlu ZyBmb3IgRmlsdGVyIGFuZCBGaWx0ZXJFZmZlY3QKSW5kZXg6IFNvdXJjZS9XZWJLaXQvUmVzb3Vy Y2VzL1NhbmRib3hQcm9maWxlcy9pb3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmlu Cj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvUmVzb3VyY2VzL1NhbmRib3hQcm9maWxlcy9p b3MvY29tLmFwcGxlLldlYktpdC5XZWJDb250ZW50LnNiLmluCShyZXZpc2lvbiAyODYwMjUpCisr KyBTb3VyY2UvV2ViS2l0L1Jlc291cmNlcy9TYW5kYm94UHJvZmlsZXMvaW9zL2NvbS5hcHBsZS5X ZWJLaXQuV2ViQ29udGVudC5zYi5pbgkod29ya2luZyBjb3B5KQpAQCAtOTIsMzAgKzkyLDEyIEBA CiAgICAgICAgIGRvbWFpbnMpKQogCiAoZGVmaW5lLW9uY2UgKGZyYW1lYnVmZmVyLWFjY2VzcykK LSAgICAoYWxsb3cgaW9raXQtb3BlbgotICAgICAgICAocmVxdWlyZS1hbGwKLSAgICAgICAgICAg IChleHRlbnNpb24gImNvbS5hcHBsZS53ZWJraXQuZXh0ZW5zaW9uLmlva2l0IikKLSAgICAgICAg ICAgIChpb2tpdC11c2VyLWNsaWVudC1jbGFzcyAiSU9Nb2JpbGVGcmFtZWJ1ZmZlclVzZXJDbGll bnQiKQotICAgICAgICApCi0gICAgICAgICh3aGVuIChkZWZpbmVkPyAnaW9raXQtZXh0ZXJuYWwt bWV0aG9kKQotICAgICAgICAgICAgKGFwcGx5LW1lc3NhZ2UtZmlsdGVyCi0gICAgICAgICAgICAg ICAgKGRlbnkgKHdpdGggdGVsZW1ldHJ5KQotICAgICAgICAgICAgICAgICAgICBpb2tpdC1hc3lu Yy1leHRlcm5hbC1tZXRob2QKLSAgICAgICAgICAgICAgICAgICAgaW9raXQtZXh0ZXJuYWwtbWV0 aG9kCi0gICAgICAgICAgICAgICAgICAgIGlva2l0LWV4dGVybmFsLXRyYXApCi0gICAgICAgICAg ICAgICAgKGFsbG93ICh3aXRoIHRlbGVtZXRyeSkgaW9raXQtZXh0ZXJuYWwtbWV0aG9kCi0gICAg ICAgICAgICAgICAgICAgIChpb2tpdC1tZXRob2QtbnVtYmVyCi0gICAgICAgICAgICAgICAgICAg ICAgICA4Ci0gICAgICAgICAgICAgICAgICAgICAgICAyOAotICAgICAgICAgICAgICAgICAgICAp Ci0gICAgICAgICAgICAgICAgKQotICAgICAgICAgICAgKQotICAgICAgICApCi0gICAgKQorICAg IChkZW55IGlva2l0LW9wZW4gKHdpdGggdGVsZW1ldHJ5LWJhY2t0cmFjZSkKKyAgICAgICAgKGlv a2l0LXVzZXItY2xpZW50LWNsYXNzICJJT01vYmlsZUZyYW1lYnVmZmVyVXNlckNsaWVudCIpKQog CiAgICAgOyBJT01vYmlsZUZyYW1lYnVmZmVyCiAgICAgKHdpdGgtZmlsdGVyIChpb2tpdC1yZWdp c3RyeS1lbnRyeS1jbGFzcyAiSU9Nb2JpbGVGcmFtZWJ1ZmZlciIpCi0gICAgICAgIChhbGxvdyBp b2tpdC1nZXQtcHJvcGVydGllcworICAgICAgICAoYWxsb3cgaW9raXQtZ2V0LXByb3BlcnRpZXMg KHdpdGggdGVsZW1ldHJ5KQogICAgICAgICAgICAgICAgKGlva2l0LXByb3BlcnR5ICJBcHBsZVRW IgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJEaXNwbGF5UGlwZVBsYW5lQmFzZUFs aWdubWVudCIKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiRGlzcGxheVBpcGVTdHJp ZGVSZXF1aXJlbWVudHMiCkluZGV4OiBTb3VyY2UvV2ViS2l0L1VJUHJvY2Vzcy9XZWJQYWdlUHJv eHkuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL1dlYlBhZ2VQcm94 eS5jcHAJKHJldmlzaW9uIDI4NjAyNSkKKysrIFNvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL1dlYlBh Z2VQcm94eS5jcHAJKHdvcmtpbmcgY29weSkKQEAgLTgwMjgsOCArODAyOCwxMCBAQAogICAgICAg ICAiSU9BdWRpb0VuZ2luZVVzZXJDbGllbnQiX3MsCiAgICAgICAgICJJT1N1cmZhY2VSb290VXNl ckNsaWVudCJfcywKICNlbmRpZgotI2lmIChQTEFURk9STShNQUMpICYmIENQVShBUk02NCkpIHx8 IFBMQVRGT1JNKElPU19GQU1JTFkpCisjaWYgUExBVEZPUk0oTUFDKSAmJiBDUFUoQVJNNjQpCiAg ICAgICAgICJJT01vYmlsZUZyYW1lYnVmZmVyVXNlckNsaWVudCJfcywKKyNlbmRpZgorI2lmIFBM QVRGT1JNKE1BQykgJiYgQ1BVKEFSTTY0KSB8fCBQTEFURk9STShJT1NfRkFNSUxZKQogICAgICAg ICAiSU9TdXJmYWNlQWNjZWxlcmF0b3JDbGllbnQiX3MsCiAjZW5kaWYKICAgICB9KTsK