240008 2022-05-03 07:23:33 -0700 [iOS][GPUP] Remove Mach sandbox extensions for non browser clients 2022-05-03 14:01:41 -0700 1 1 1 Unclassified WebKit WebKit Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED FIXED InRadar P2 Normal --- 1 pvollan pvollan bfulgham cdumez gavin.p ggaren mazander sihui_liu webkit-bug-importer oldest_to_newest 1866111 0 pvollan 2022-05-03 07:23:33 -0700 Remove Mach sandbox extensions for clients that are not browsers in the GPU process on iOS. The same set of extensions has recently been removed from the WebContent process. We also block these in the GPU process' sandbox, so there should be no change in behavior. 1866113 1 458741 pvollan 2022-05-03 07:31:41 -0700 Created attachment 458741 Patch 1866156 2 458741 ggaren 2022-05-03 09:26:53 -0700 Comment on attachment 458741 Patch r=me 1866183 3 458741 pvollan 2022-05-03 10:47:32 -0700 Comment on attachment 458741 Patch Thanks for reviewing! 1866195 4 ews-feeder 2022-05-03 11:26:56 -0700 Committed r293733 (250221@main): <https://commits.webkit.org/250221@main> All reviewed patches have been landed. Closing bug and clearing flags on attachment 458741. 1866196 5 webkit-bug-importer 2022-05-03 11:27:13 -0700 <rdar://problem/92682154> 458741 2022-05-03 07:31:41 -0700 2022-05-03 11:26:58 -0700 Patch bug-240008-20220503073141.patch text/plain 5171 pvollan SW5kZXg6IFNvdXJjZS9XZWJLaXQvQ2hhbmdlTG9nCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJL aXQvQ2hhbmdlTG9nCShyZXZpc2lvbiAyOTM3MjMpCisrKyBTb3VyY2UvV2ViS2l0L0NoYW5nZUxv Zwkod29ya2luZyBjb3B5KQpAQCAtMSwzICsxLDI0IEBACisyMDIyLTA1LTAzICBQZXIgQXJuZSBW b2xsYW4gIDxwdm9sbGFuQGFwcGxlLmNvbT4KKworICAgICAgICBbaU9TXVtHUFVQXSBSZW1vdmUg TWFjaCBzYW5kYm94IGV4dGVuc2lvbnMgZm9yIG5vbiBicm93c2VyIGNsaWVudHMKKyAgICAgICAg aHR0cHM6Ly9idWdzLndlYmtpdC5vcmcvc2hvd19idWcuY2dpP2lkPTI0MDAwOAorCisgICAgICAg IFJldmlld2VkIGJ5IE5PQk9EWSAoT09QUyEpLgorCisgICAgICAgIFJlbW92ZSBNYWNoIHNhbmRi b3ggZXh0ZW5zaW9ucyBmb3IgY2xpZW50cyB0aGF0IGFyZSBub3QgYnJvd3NlcnMgaW4gdGhlIEdQ VSBwcm9jZXNzIG9uIGlPUy4gVGhlIHNhbWUgc2V0IG9mIGV4dGVuc2lvbnMKKyAgICAgICAgaGFz IHJlY2VudGx5IGJlZW4gcmVtb3ZlZCBmcm9tIHRoZSBXZWJDb250ZW50IHByb2Nlc3MuIFdlIGFs c28gYmxvY2sgdGhlc2UgaW4gdGhlIEdQVSBwcm9jZXNzJyBzYW5kYm94LCBzbyB0aGVyZSBzaG91 bGQKKyAgICAgICAgYmUgbm8gY2hhbmdlIGluIGJlaGF2aW9yLgorCisgICAgICAgICogR1BVUHJv Y2Vzcy9HUFVQcm9jZXNzLmNwcDoKKyAgICAgICAgKFdlYktpdDo6R1BVUHJvY2Vzczo6aW5pdGlh bGl6ZUdQVVByb2Nlc3MpOgorICAgICAgICAqIEdQVVByb2Nlc3MvR1BVUHJvY2Vzc0NyZWF0aW9u UGFyYW1ldGVycy5jcHA6CisgICAgICAgIChXZWJLaXQ6OkdQVVByb2Nlc3NDcmVhdGlvblBhcmFt ZXRlcnM6OmVuY29kZSBjb25zdCk6CisgICAgICAgIChXZWJLaXQ6OkdQVVByb2Nlc3NDcmVhdGlv blBhcmFtZXRlcnM6OmRlY29kZSk6CisgICAgICAgICogR1BVUHJvY2Vzcy9HUFVQcm9jZXNzQ3Jl YXRpb25QYXJhbWV0ZXJzLmg6CisgICAgICAgICogVUlQcm9jZXNzL0dQVS9HUFVQcm9jZXNzUHJv eHkuY3BwOgorICAgICAgICAoV2ViS2l0OjpHUFVQcm9jZXNzUHJveHk6OkdQVVByb2Nlc3NQcm94 eSk6CisgICAgICAgIChXZWJLaXQ6Om5vbkJyb3dzZXJTZXJ2aWNlcyk6IERlbGV0ZWQuCisKIDIw MjItMDUtMDMgIEtpbW1vIEtpbm51bmVuICA8a2tpbm51bmVuQGFwcGxlLmNvbT4KIAogICAgICAg ICBJUEMgc3RyZWFtIGNvbm5lY3Rpb24gc2VuZHMgc2hvdWxkIGZhaWwgaW1tZWRpYXRlbHkgd2hl biBjb25uZWN0aW9uIGNsb3NlcwpJbmRleDogU291cmNlL1dlYktpdC9HUFVQcm9jZXNzL0dQVVBy b2Nlc3MuY3BwCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvR1BVUHJvY2Vzcy9HUFVQcm9j ZXNzLmNwcAkocmV2aXNpb24gMjkzNTk1KQorKysgU291cmNlL1dlYktpdC9HUFVQcm9jZXNzL0dQ VVByb2Nlc3MuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC0yNTMsNyArMjUzLDYgQEAgdm9pZCBHUFVQ cm9jZXNzOjppbml0aWFsaXplR1BVUHJvY2VzcyhHUFVQcm9jZXNzQ3JlYXRpCiAjaWYgUExBVEZP Uk0oSU9TX0ZBTUlMWSkKICAgICBTYW5kYm94RXh0ZW5zaW9uOjpjb25zdW1lUGVybWFuZW50bHko cGFyYW1ldGVycy5jb21waWxlclNlcnZpY2VFeHRlbnNpb25IYW5kbGVzKTsKICAgICBTYW5kYm94 RXh0ZW5zaW9uOjpjb25zdW1lUGVybWFuZW50bHkocGFyYW1ldGVycy5keW5hbWljSU9LaXRFeHRl bnNpb25IYW5kbGVzKTsKLSAgICBTYW5kYm94RXh0ZW5zaW9uOjpjb25zdW1lUGVybWFuZW50bHko cGFyYW1ldGVycy5keW5hbWljTWFjaEV4dGVuc2lvbkhhbmRsZXMpOwogI2VuZGlmCiAKICNpZiBI QVZFKENHSU1BR0VTT1VSQ0VfV0lUSF9TRVRfQUxMT1dBQkxFX1RZUEVTKQpJbmRleDogU291cmNl L1dlYktpdC9HUFVQcm9jZXNzL0dQVVByb2Nlc3NDcmVhdGlvblBhcmFtZXRlcnMuY3BwCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0KLS0tIFNvdXJjZS9XZWJLaXQvR1BVUHJvY2Vzcy9HUFVQcm9jZXNzQ3JlYXRpb25QYXJh bWV0ZXJzLmNwcAkocmV2aXNpb24gMjkzNTk1KQorKysgU291cmNlL1dlYktpdC9HUFVQcm9jZXNz L0dQVVByb2Nlc3NDcmVhdGlvblBhcmFtZXRlcnMuY3BwCSh3b3JraW5nIGNvcHkpCkBAIC02MCw3 ICs2MCw2IEBAIHZvaWQgR1BVUHJvY2Vzc0NyZWF0aW9uUGFyYW1ldGVyczo6ZW5jb2RlKElQQzo6 RW5jb2RlcgogI2lmIFBMQVRGT1JNKElPU19GQU1JTFkpCiAgICAgZW5jb2RlciA8PCBjb21waWxl clNlcnZpY2VFeHRlbnNpb25IYW5kbGVzOwogICAgIGVuY29kZXIgPDwgZHluYW1pY0lPS2l0RXh0 ZW5zaW9uSGFuZGxlczsKLSAgICBlbmNvZGVyIDw8IGR5bmFtaWNNYWNoRXh0ZW5zaW9uSGFuZGxl czsKICNlbmRpZgogCiAgICAgZW5jb2RlciA8PCBhcHBsaWNhdGlvblZpc2libGVOYW1lOwpAQCAt MTExLDEyICsxMTAsNiBAQCBib29sIEdQVVByb2Nlc3NDcmVhdGlvblBhcmFtZXRlcnM6OmRlY29k ZShJUEM6OkRlY29kZXIKICAgICBpZiAoIWR5bmFtaWNJT0tpdEV4dGVuc2lvbkhhbmRsZXMpCiAg ICAgICAgIHJldHVybiBmYWxzZTsKICAgICByZXN1bHQuZHluYW1pY0lPS2l0RXh0ZW5zaW9uSGFu ZGxlcyA9IFdURk1vdmUoKmR5bmFtaWNJT0tpdEV4dGVuc2lvbkhhbmRsZXMpOwotCi0gICAgc3Rk OjpvcHRpb25hbDxWZWN0b3I8U2FuZGJveEV4dGVuc2lvbjo6SGFuZGxlPj4gZHluYW1pY01hY2hF eHRlbnNpb25IYW5kbGVzOwotICAgIGRlY29kZXIgPj4gZHluYW1pY01hY2hFeHRlbnNpb25IYW5k bGVzOwotICAgIGlmICghZHluYW1pY01hY2hFeHRlbnNpb25IYW5kbGVzKQotICAgICAgICByZXR1 cm4gZmFsc2U7Ci0gICAgcmVzdWx0LmR5bmFtaWNNYWNoRXh0ZW5zaW9uSGFuZGxlcyA9IFdURk1v dmUoKmR5bmFtaWNNYWNoRXh0ZW5zaW9uSGFuZGxlcyk7CiAjZW5kaWYKIAogICAgIGlmICghZGVj b2Rlci5kZWNvZGUocmVzdWx0LmFwcGxpY2F0aW9uVmlzaWJsZU5hbWUpKQpJbmRleDogU291cmNl L1dlYktpdC9HUFVQcm9jZXNzL0dQVVByb2Nlc3NDcmVhdGlvblBhcmFtZXRlcnMuaAo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09Ci0tLSBTb3VyY2UvV2ViS2l0L0dQVVByb2Nlc3MvR1BVUHJvY2Vzc0NyZWF0aW9uUGFyYW1l dGVycy5oCShyZXZpc2lvbiAyOTM1OTUpCisrKyBTb3VyY2UvV2ViS2l0L0dQVVByb2Nlc3MvR1BV UHJvY2Vzc0NyZWF0aW9uUGFyYW1ldGVycy5oCSh3b3JraW5nIGNvcHkpCkBAIC02MCw3ICs2MCw2 IEBAIHN0cnVjdCBHUFVQcm9jZXNzQ3JlYXRpb25QYXJhbWV0ZXJzIHsKICNpZiBQTEFURk9STShJ T1NfRkFNSUxZKQogICAgIFZlY3RvcjxTYW5kYm94RXh0ZW5zaW9uOjpIYW5kbGU+IGNvbXBpbGVy U2VydmljZUV4dGVuc2lvbkhhbmRsZXM7CiAgICAgVmVjdG9yPFNhbmRib3hFeHRlbnNpb246Okhh bmRsZT4gZHluYW1pY0lPS2l0RXh0ZW5zaW9uSGFuZGxlczsKLSAgICBWZWN0b3I8U2FuZGJveEV4 dGVuc2lvbjo6SGFuZGxlPiBkeW5hbWljTWFjaEV4dGVuc2lvbkhhbmRsZXM7CiAjZW5kaWYKIAog ICAgIFN0cmluZyBhcHBsaWNhdGlvblZpc2libGVOYW1lOwpJbmRleDogU291cmNlL1dlYktpdC9V SVByb2Nlc3MvR1BVL0dQVVByb2Nlc3NQcm94eS5jcHAKPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQotLS0gU291cmNlL1dl YktpdC9VSVByb2Nlc3MvR1BVL0dQVVByb2Nlc3NQcm94eS5jcHAJKHJldmlzaW9uIDI5MzU5NSkK KysrIFNvdXJjZS9XZWJLaXQvVUlQcm9jZXNzL0dQVS9HUFVQcm9jZXNzUHJveHkuY3BwCSh3b3Jr aW5nIGNvcHkpCkBAIC04MSwxOSArODEsNiBAQCBzdGF0aWMgYm9vbCBzaG91bGRDcmVhdGVBcHBs ZUNhbWVyYVNlcnZpY2VTYW5kYm94RXh0ZW4KIH0KICNlbmRpZgogCi0jaWYgUExBVEZPUk0oSU9T X0ZBTUlMWSkKLXN0YXRpYyBjb25zdCBWZWN0b3I8QVNDSUlMaXRlcmFsPiYgbm9uQnJvd3NlclNl cnZpY2VzKCkKLXsKLSAgICBBU1NFUlQoaXNNYWluUnVuTG9vcCgpKTsKLSAgICBzdGF0aWMgTmV2 ZXJEZXN0cm95ZWQgc2VydmljZXMgPSBWZWN0b3I8QVNDSUlMaXRlcmFsPiB7Ci0gICAgICAgICJj b20uYXBwbGUuaWNvbnNlcnZpY2VzIl9zLAotICAgICAgICAiY29tLmFwcGxlLlBvd2VyTWFuYWdl bWVudC5jb250cm9sIl9zLAotICAgICAgICAiY29tLmFwcGxlLmZyb250Ym9hcmQuc3lzdGVtYXBw c2VydmljZXMiX3MKLSAgICB9OwotICAgIHJldHVybiBzZXJ2aWNlczsKLX0KLSNlbmRpZgotCiBz dGF0aWMgV2Vha1B0cjxHUFVQcm9jZXNzUHJveHk+JiBzaW5nbGV0b24oKQogewogICAgIHN0YXRp YyBOZXZlckRlc3Ryb3llZDxXZWFrUHRyPEdQVVByb2Nlc3NQcm94eT4+IHNpbmdsZXRvbjsKQEAg LTE3Myw5ICsxNjAsNiBAQCBHUFVQcm9jZXNzUHJveHk6OkdQVVByb2Nlc3NQcm94eSgpCiAgICAg ICAgIHBhcmFtZXRlcnMuY29tcGlsZXJTZXJ2aWNlRXh0ZW5zaW9uSGFuZGxlcyA9IFNhbmRib3hF eHRlbnNpb246OmNyZWF0ZUhhbmRsZXNGb3JNYWNoTG9va3VwKFdlYkNvcmU6OmFneENvbXBpbGVy U2VydmljZXMoKSwgc3RkOjpudWxsb3B0KTsKICAgICAgICAgcGFyYW1ldGVycy5keW5hbWljSU9L aXRFeHRlbnNpb25IYW5kbGVzID0gU2FuZGJveEV4dGVuc2lvbjo6Y3JlYXRlSGFuZGxlc0ZvcklP S2l0Q2xhc3NFeHRlbnNpb25zKFdlYkNvcmU6OmFneENvbXBpbGVyQ2xhc3NlcygpLCBzdGQ6Om51 bGxvcHQpOwogICAgIH0KLQotICAgIGlmICghV2ViQ29yZTo6SU9TQXBwbGljYXRpb246OmlzTW9i aWxlU2FmYXJpKCkpCi0gICAgICAgIHBhcmFtZXRlcnMuZHluYW1pY01hY2hFeHRlbnNpb25IYW5k bGVzID0gU2FuZGJveEV4dGVuc2lvbjo6Y3JlYXRlSGFuZGxlc0Zvck1hY2hMb29rdXAobm9uQnJv d3NlclNlcnZpY2VzKCksIHN0ZDo6bnVsbG9wdCk7CiAjZW5kaWYKIAogICAgIHBsYXRmb3JtSW5p dGlhbGl6ZUdQVVByb2Nlc3NQYXJhbWV0ZXJzKHBhcmFtZXRlcnMpOwo=