236975 2022-02-21 07:48:17 -0800 [macOS] Remove resource access in sandbox for older OS versions 2022-02-21 10:12:17 -0800 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham gavin.p ggaren mazander webkit-bug-importer wilander oldest_to_newest 1844205 0 pvollan 2022-02-21 07:48:17 -0800 Remove access to some resources in sandbox for older OS versions. Access to these resources were initially added in https://trac.webkit.org/changeset/290180/webkit and https://trac.webkit.org/changeset/290066/webkit, and was only intended to land on a branch. 1844207 1 452733 pvollan 2022-02-21 07:50:23 -0800 Created attachment 452733 Patch 1844215 2 452733 bfulgham 2022-02-21 08:14:09 -0800 Comment on attachment 452733 Patch r=me 1844217 3 452733 pvollan 2022-02-21 08:16:00 -0800 Comment on attachment 452733 Patch Thanks for reviewing! 1844253 4 ews-feeder 2022-02-21 10:11:50 -0800 Committed r290250 (?): <https://commits.webkit.org/r290250> All reviewed patches have been landed. Closing bug and clearing flags on attachment 452733. 1844254 5 webkit-bug-importer 2022-02-21 10:12:17 -0800 <rdar://problem/89242759> 452733 2022-02-21 07:50:23 -0800 2022-02-21 10:11:52 -0800 Patch bug-236975-20220221075021.patch text/plain 4977 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyOTAyNDUpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDE3IEBACisyMDIyLTAyLTIxICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbbWFjT1NdIFJlbW92ZSByZXNv dXJjZSBhY2Nlc3MgaW4gc2FuZGJveCBmb3Igb2xkZXIgT1MgdmVyc2lvbnMKKyAgICAgICAgaHR0 cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTIzNjk3NQorCisgICAgICAgIFJl dmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFJlbW92ZSBhY2Nlc3MgdG8gc29t ZSByZXNvdXJjZXMgaW4gc2FuZGJveCBmb3Igb2xkZXIgT1MgdmVyc2lvbnMuIEFjY2VzcyB0byB0 aGVzZSByZXNvdXJjZXMgd2VyZSBpbml0aWFsbHkKKyAgICAgICAgYWRkZWQgaW4gaHR0cHM6Ly90 cmFjLndlYmtpdC5vcmcvY2hhbmdlc2V0LzI5MDE4MC93ZWJraXQgYW5kIGh0dHBzOi8vdHJhYy53 ZWJraXQub3JnL2NoYW5nZXNldC8yOTAwNjYvd2Via2l0LAorICAgICAgICBhbmQgd2FzIG9ubHkg aW50ZW5kZWQgdG8gbGFuZCBvbiBhIGJyYW5jaC4KKworICAgICAgICAqIE5ldHdvcmtQcm9jZXNz L21hYy9jb20uYXBwbGUuV2ViS2l0Lk5ldHdvcmtQcm9jZXNzLnNiLmluOgorICAgICAgICAqIFdl YlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW46CisKIDIwMjItMDItMjEgIFNpaHVp IExpdSAgPHNpaHVpX2xpdUBhcHBsZS5jb20+CiAKICAgICAgICAgRmV0Y2hpbmcgd2Vic2l0ZSBk YXRhIG1heSBnZXQgd3JvbmcgcmVjb3JkIGFmdGVyIG1pZ3JhdGluZyBkYXRhIHRvIGdlbmVyYWwg c3RvcmFnZSBkaXJlY3RvcnkKSW5kZXg6IFNvdXJjZS9XZWJLaXQvTmV0d29ya1Byb2Nlc3MvbWFj L2NvbS5hcHBsZS5XZWJLaXQuTmV0d29ya1Byb2Nlc3Muc2IuaW4KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291 cmNlL1dlYktpdC9OZXR3b3JrUHJvY2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJv Y2Vzcy5zYi5pbgkocmV2aXNpb24gMjkwMjQ0KQorKysgU291cmNlL1dlYktpdC9OZXR3b3JrUHJv Y2Vzcy9tYWMvY29tLmFwcGxlLldlYktpdC5OZXR3b3JrUHJvY2Vzcy5zYi5pbgkod29ya2luZyBj b3B5KQpAQCAtMTE0LDIwICsxMTQsNiBAQAogKGFsbG93IG1hY2gtbG9va3VwIChnbG9iYWwtbmFt ZSAiY29tLmFwcGxlLmNvcmVzZXJ2aWNlcy5sYXVuY2hzZXJ2aWNlc2QiKSkKICNlbmRpZgogCi0j aWYgIVBMQVRGT1JNKE1BQykgfHwgX19NQUNfT1NfWF9WRVJTSU9OX01JTl9SRVFVSVJFRCA8IDEz MDAwMAotKGFsbG93IG1hY2gtbG9va3VwCi0gICAgKGdsb2JhbC1uYW1lCi0gICAgICAgICJjb20u YXBwbGUuYW5hbHl0aWNzZC5tZXNzYWdldHJhY2VyIgotICAgICAgICAiY29tLmFwcGxlLmFwcHNs ZWVwIgotICAgICAgICAiY29tLmFwcGxlLmJzZC5kaXJoZWxwZXIiCi0gICAgICAgICJjb20uYXBw bGUuZXNwZCIKLSAgICAgICAgImNvbS5hcHBsZS5zZWNpbml0ZCIKLSAgICAgICAgImNvbS5hcHBs ZS5zeXN0ZW0uRGlyZWN0b3J5U2VydmljZS5saWJpbmZvX3YxIgotICAgICAgICAiY29tLmFwcGxl LnN5c3RlbS5sb2dnZXIiCi0gICAgICAgICJjb20uYXBwbGUuc3lzdGVtLm9wZW5kaXJlY3Rvcnlk Lm1lbWJlcnNoaXAiCi0gICAgICAgICJjb20uYXBwbGUueHBjLmFjdGl2aXR5LnVubWFuYWdlZCIp KQotI2VuZGlmCi0KICNpZiAhRU5BQkxFKENGUFJFRlNfRElSRUNUX01PREUpCiAoYWxsb3cgbWFj aC1sb29rdXAKICAgICAoZ2xvYmFsLW5hbWUgImNvbS5hcHBsZS5jZnByZWZzZC5hZ2VudCIpCklu ZGV4OiBTb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3MvY29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQotLS0gU291cmNlL1dlYktpdC9XZWJQcm9jZXNzL2NvbS5hcHBsZS5XZWJQcm9j ZXNzLnNiLmluCShyZXZpc2lvbiAyOTAyNDQpCisrKyBTb3VyY2UvV2ViS2l0L1dlYlByb2Nlc3Mv Y29tLmFwcGxlLldlYlByb2Nlc3Muc2IuaW4JKHdvcmtpbmcgY29weSkKQEAgLTE4NzIsNTcgKzE4 NzIsNiBAQAogKGRpc2FibGUtc3lzY2FsbC1pbmZlcmVuY2UpCiAjZW5kaWYKIAotI2lmICFQTEFU Rk9STShNQUMpIHx8IF9fTUFDX09TX1hfVkVSU0lPTl9NSU5fUkVRVUlSRUQgPCAxMzAwMDAKLShk ZWZpbmUgKHN5c2NhbGwtdW5peC1vbGRlci1tYWNPUykKLSAgICAoc3lzY2FsbC1udW1iZXIKLSAg ICAgICAgU1lTX19fcHRocmVhZF9tYXJrY2FuY2VsCi0gICAgICAgIFNZU19hYm9ydF93aXRoX3Bh eWxvYWQKLSAgICAgICAgU1lTX2NobW9kX2V4dGVuZGVkCi0gICAgICAgIFNZU19jb25uZWN0X25v Y2FuY2VsCi0gICAgICAgIFNZU19jb25uZWN0eAotICAgICAgICBTWVNfZmdldGF0dHJsaXN0IDs7 IDxyZGFyOi8vcHJvYmxlbS81MDkzMTExMD4KLSAgICAgICAgU1lTX2ZpbGVwb3J0X21ha2Vwb3J0 Ci0gICAgICAgIFNZU19mc3RhdDY0X2V4dGVuZGVkIDs7IDxyZGFyOi8vcHJvYmxlbS82MTMxMDAx OT4KLSAgICAgICAgU1lTX2dldHBlZXJuYW1lCi0gICAgICAgIFNZU19nZXRzb2Nrb3B0Ci0gICAg ICAgIFNZU19ndWFyZGVkX3dyaXRlX25wCi0gICAgICAgIFNZU19sc3RhdDY0X2V4dGVuZGVkCi0g ICAgICAgIFNZU19sc3RhdF9leHRlbmRlZAotICAgICAgICBTWVNfbWVtb3J5c3RhdHVzX2NvbnRy b2wgOzsgTmVlZGVkIGZvciBtZW1vcnkgbWVhc3VyZW1lbnQgaW5mcmFzdHJ1Y3R1cmUsIHNlZSA8 cmRhcjovL3Byb2JsZW0vNDg2NDcyNjM+Ci0gICAgICAgIFNZU19ta2RpcmF0Ci0gICAgICAgIFNZ U19vcGVuX2Rwcm90ZWN0ZWRfbnAgOzsgPHJkYXI6Ly9wcm9ibGVtLzc0NDczODI0PgotICAgICAg ICBTWVNfcGlwZQotICAgICAgICBTWVNfcHJvY2Vzc19wb2xpY3kKLSAgICAgICAgU1lTX3BzeW5j aF9yd19yZGxvY2sgOzsgPHJkYXI6Ly9wcm9ibGVtLzQ5MDYwMzU5PgotICAgICAgICBTWVNfcHdy aXRlCi0gICAgICAgIFNZU19xdW90YWN0bCA7OyA8cmRhcjovL3Byb2JsZW0vNDk5NDUwMzE+Ci0g ICAgICAgIFNZU19yZWN2ZnJvbQotICAgICAgICBTWVNfcmVjdmZyb21fbm9jYW5jZWwKLSAgICAg ICAgU1lTX3JtZGlyCi0gICAgICAgIFNZU19zZWxlY3QKLSAgICAgICAgU1lTX3NlbGVjdF9ub2Nh bmNlbAotICAgICAgICBTWVNfc2VtX3Bvc3QKLSAgICAgICAgU1lTX3NlbV93YWl0Ci0gICAgICAg IFNZU19zZW5kbXNnX25vY2FuY2VsCi0gICAgICAgIFNZU19zZW5kdG9fbm9jYW5jZWwKLSNpZiBf X01BQ19PU19YX1ZFUlNJT05fTUlOX1JFUVVJUkVEIDwgMTIwMDAwCi0gICAgICAgIFNZU19zZXRh dHRybGlzdCA7OyByZGFyOi8vcHJvYmxlbS83NDE2Mjc3NwotI2VuZGlmCi0gICAgICAgIFNZU19z ZXRwcmlvcml0eQotICAgICAgICBTWVNfc2V0cmxpbWl0Ci0gICAgICAgIFNZU19zZXRzb2Nrb3B0 Ci0gICAgICAgIFNZU19zaHV0ZG93bgotICAgICAgICBTWVNfc2lncmV0dXJuCi0gICAgICAgIFNZ U19zb2NrZXRwYWlyCi0gICAgICAgIFNZU19zdGF0NjRfZXh0ZW5kZWQgOzsgPHJkYXI6Ly9wcm9i bGVtLzUwNDczMzMwPgotICAgICAgICBTWVNfdGVybWluYXRlX3dpdGhfcGF5bG9hZCA7OyA8cmRh cjovL3Byb2JsZW0vNTAwMjY1ODA+Ci0gICAgICAgIFNZU190aHJlYWRfc2VsZnVzYWdlCi0jaWYg X19NQUNfT1NfWF9WRVJTSU9OX01JTl9SRVFVSVJFRCA+PSAxMTAwMDAKLSAgICAgICAgU1lTX3Vs b2NrX3dhaXQyIDs7IDxyZGFyOi8vcHJvYmxlbS81ODc0Mzc3OD4KLSNlbmRpZgotKSkKLSNlbmRp ZgotCiAoZGVmaW5lIChzeXNjYWxsLXVuaXgtY29tbW9uKQogICAgIChzeXNjYWxsLW51bWJlcgog ICAgICAgICBTWVNfX19kaXNhYmxlX3RocmVhZHNpZ25hbApAQCAtMTk3MCw3ICsxOTE5LDYgQEAK ICAgICAgICAgU1lTX2tkZWJ1Z190cmFjZQogICAgICAgICBTWVNfa2RlYnVnX3RyYWNlNjQKICAg ICAgICAgU1lTX2tkZWJ1Z190cmFjZV9zdHJpbmcgOzsgTmVlZGVkIGZvciBwZXJmb3JtYW5jZSBz YW1wbGluZywgc2VlIDxyZGFyOi8vcHJvYmxlbS80ODgyOTY1NT4uCi0gICAgICAgIFNZU19rZXZl bnQgOzsgPHJkYXI6Ly84OTA3MjM2MT4KICAgICAgICAgU1lTX2tldmVudF9pZAogICAgICAgICBT WVNfa2V2ZW50X3FvcwogICAgICAgICBTWVNfa3F1ZXVlIDs7IFNlZSA8cmRhcjovL3Byb2JsZW0v ODgyNDE3Njg+LiBSZW1vdmUgYWZ0ZXIgPHJkYXI6Ly81NjYzNDI0MD4gaXMgcmVzb2x2ZWQuCkBA IC0yMDQ2LDYgKzE5OTQsNyBAQAogICAgICAgICBTWVNfZ3VhcmRlZF9vcGVuX25wCiAgICAgICAg IFNZU19ndWFyZGVkX3B3cml0ZV9ucAogICAgICAgICBTWVNfa2RlYnVnX3R5cGVmaWx0ZXIKKyAg ICAgICAgU1lTX2tldmVudCA7OyA8cmRhcjovLzg5MDcyMzYxPgogICAgICAgICBTWVNfbWxvY2sK ICAgICAgICAgU1lTX211bmxvY2sKICAgICAgICAgU1lTX25lY3BfY2xpZW50X2FjdGlvbgpAQCAt MjA3OCwxMSArMjAyNyw2IEBACiAgICAgKGFsbG93IHN5c2NhbGwtdW5peAogICAgICAgICAoc3lz Y2FsbC11bml4LWNvbW1vbikpCiAKLSNpZiAhUExBVEZPUk0oTUFDKSB8fCBfX01BQ19PU19YX1ZF UlNJT05fTUlOX1JFUVVJUkVEIDwgMTMwMDAwCi0gICAgKGFsbG93IHN5c2NhbGwtdW5peAotICAg ICAgICAoc3lzY2FsbC11bml4LW9sZGVyLW1hY09TKSkKLSNlbmRpZgotCiAgICAgKGlmIChlcXVh bD8gKHBhcmFtICJDUFUiKSAiYXJtNjQiKQogICAgICAgICAoYmVnaW4KICAgICAgICAgICAgIChh bGxvdyBzeXNjYWxsLXVuaXgK