236383 2022-02-09 10:49:01 -0800 Crash in WebCore::IOSurface::bytesPerRowAlignment 2022-04-11 07:02:13 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified NEW InRadar P2 Normal --- 1 pvollan webkit-unassigned webkit-bug-importer oldest_to_newest 1839280 0 pvollan 2022-02-09 10:49:01 -0800 When the UI process does not have sufficient sandbox privileges to call IOSurfaceGetPropertyAlignment, a RELEASE_ASSERT is hit in WebCore::IOSurface::bytesPerRowAlignment. 1839281 1 pvollan 2022-02-09 10:49:22 -0800 <rdar://88534212> 1839290 2 451408 pvollan 2022-02-09 11:03:54 -0800 Created attachment 451408 Patch 451408 2022-02-09 11:03:54 -0800 2022-02-09 11:03:54 -0800 Patch 236383.patch text/plain 2174 pvollan SW5kZXg6IFNvdXJjZS9XZWJDb3JlL0NoYW5nZUxvZwo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09Ci0tLSBTb3VyY2UvV2Vi Q29yZS9DaGFuZ2VMb2cJKHJldmlzaW9uIDI4OTIzNykKKysrIFNvdXJjZS9XZWJDb3JlL0NoYW5n ZUxvZwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDIyLTAyLTA5ICBQZXIgQXJu ZSBWb2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBDcmFzaCBpbiBXZWJDb3Jl OjpJT1N1cmZhY2U6OmJ5dGVzUGVyUm93QWxpZ25tZW50CisgICAgICAgIGh0dHBzOi8vYnVncy53 ZWJraXQub3JnL3Nob3dfYnVnLmNnaT9pZD0yMzYzODMKKyAgICAgICAgPHJkYXI6Ly84ODUzNDIx Mj4KKworICAgICAgICBSZXZpZXdlZCBieSBOT0JPRFkgKE9PUFMhKS4KKworICAgICAgICBXaGVu IHRoZSBVSSBwcm9jZXNzIGRvZXMgbm90IGhhdmUgc3VmZmljaWVudCBzYW5kYm94IHByaXZpbGVn ZXMgdG8gY2FsbCBJT1N1cmZhY2VHZXRQcm9wZXJ0eUFsaWdubWVudCwgYSBSRUxFQVNFX0FTU0VS VCBpcyBoaXQKKyAgICAgICAgaW4gV2ViQ29yZTo6SU9TdXJmYWNlOjpieXRlc1BlclJvd0FsaWdu bWVudC4gQWRkcmVzcyB0aGlzIGJ5IHJldHVybmluZyBhbiBhcHByb3ByaWF0ZSB2YWx1ZSBpbnN0 ZWFkLgorCisgICAgICAgICogcGxhdGZvcm0vZ3JhcGhpY3MvY29jb2EvSU9TdXJmYWNlLm1tOgor ICAgICAgICAoV2ViQ29yZTo6SU9TdXJmYWNlOjpieXRlc1BlclJvd0FsaWdubWVudCk6CisKIDIw MjItMDItMDcgIFdlbnNvbiBIc2llaCAgPHdlbnNvbl9oc2llaEBhcHBsZS5jb20+CiAKICAgICAg ICAgQWRkIFBhZ2VDbGllbnQgcGx1bWJpbmcgZm9yIHZpZGVvIGZyYW1lIGV4dHJhY3Rpb24KSW5k ZXg6IFNvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dyYXBoaWNzL2NvY29hL0lPU3VyZmFjZS5tbQo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBTb3VyY2UvV2ViQ29yZS9wbGF0Zm9ybS9ncmFwaGljcy9jb2NvYS9JT1N1 cmZhY2UubW0JKHJldmlzaW9uIDI4OTIzNykKKysrIFNvdXJjZS9XZWJDb3JlL3BsYXRmb3JtL2dy YXBoaWNzL2NvY29hL0lPU3VyZmFjZS5tbQkod29ya2luZyBjb3B5KQpAQCAtMjg3LDEzICsyODcs MTUgQEAKIHsKICAgICBhdXRvIGFsaWdubWVudCA9IHN1cmZhY2VCeXRlc1BlclJvd0FsaWdubWVu dCgpLmxvYWQoKTsKICAgICBpZiAoIWFsaWdubWVudCkgewotICAgICAgICBzdXJmYWNlQnl0ZXNQ ZXJSb3dBbGlnbm1lbnQoKS5zdG9yZShJT1N1cmZhY2VHZXRQcm9wZXJ0eUFsaWdubWVudChrSU9T dXJmYWNlQnl0ZXNQZXJSb3cpKTsKLSAgICAgICAgYWxpZ25tZW50ID0gc3VyZmFjZUJ5dGVzUGVy Um93QWxpZ25tZW50KCkubG9hZCgpOworICAgICAgICBhbGlnbm1lbnQgPSBJT1N1cmZhY2VHZXRQ cm9wZXJ0eUFsaWdubWVudChrSU9TdXJmYWNlQnl0ZXNQZXJSb3cpOwogICAgICAgICAvLyBBIHJl dHVybiB2YWx1ZSBmb3IgSU9TdXJmYWNlR2V0UHJvcGVydHlBbGlnbm1lbnQoa0lPU3VyZmFjZUJ5 dGVzUGVyUm93KSBvZiAxIGlzIGludmFsaWQuCiAgICAgICAgIC8vIFNlZSBodHRwczovL2RldmVs b3Blci5hcHBsZS5jb20vZG9jdW1lbnRhdGlvbi9pb3N1cmZhY2UvMTQxOTQ1My1pb3N1cmZhY2Vn ZXRwcm9wZXJ0eWFsaWdubWVudD9sYW5ndWFnZT1vYmpjCiAgICAgICAgIC8vIFRoaXMgbGlrZWx5 IG1lYW5zIHRoYXQgdGhlIHNhbmRib3ggaXMgYmxvY2tpbmcgYWNjZXNzIHRvIHRoZSBJT1N1cmZh Y2UgSU9LaXQgY2xhc3MsCiAgICAgICAgIC8vIGFuZCB0aGF0IElPU3VyZmFjZTo6Ynl0ZXNQZXJS b3dBbGlnbm1lbnQoKSBoYXMgYmVlbiBjYWxsZWQgYmVmb3JlIElPU3VyZmFjZTo6c2V0Qnl0ZXNQ ZXJSb3dBbGlnbm1lbnQuCi0gICAgICAgIFJFTEVBU0VfQVNTRVJUKGFsaWdubWVudCA+IDEpOwor ICAgICAgICBBU1NFUlQoYWxpZ25tZW50ID4gMSk7CisgICAgICAgIGlmIChhbGlnbm1lbnQgPD0g MSkKKyAgICAgICAgICAgIGFsaWdubWVudCA9IDY0OworICAgICAgICBzdXJmYWNlQnl0ZXNQZXJS b3dBbGlnbm1lbnQoKS5zdG9yZShhbGlnbm1lbnQpOwogICAgIH0KICAgICByZXR1cm4gYWxpZ25t ZW50OwogfQo=