<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>301565</bug_id>
          
          <creation_ts>2025-10-28 05:29:11 -0700</creation_ts>
          <short_desc>Libpas should set lockdown_mode_byte and hardened_byte in pas_mte_config.c</short_desc>
          <delta_ts>2025-11-07 12:31:22 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>bmalloc</component>
          <version>WebKit Nightly Build</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Marcus Plutowski">marcus_plutowski</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>ggaren</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>2154685</commentid>
    <comment_count>0</comment_count>
    <who name="Marcus Plutowski">marcus_plutowski</who>
    <bug_when>2025-10-28 05:29:11 -0700</bug_when>
    <thetext>Right now, there are certain code paths (privileged processes) that do not ever set the lockdown mode byte or the hardened byte. This does not have any effect at present because both of these bytes are only ever used *within* WebContent to up the hardening level, but it’s confusing / bug prone in the case that someone adds some condition that checks for those bytes elsewhere in the code.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2154686</commentid>
    <comment_count>1</comment_count>
    <who name="Marcus Plutowski">marcus_plutowski</who>
    <bug_when>2025-10-28 05:33:53 -0700</bug_when>
    <thetext>&lt;rdar://problem/163557770&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2154687</commentid>
    <comment_count>2</comment_count>
    <who name="Marcus Plutowski">marcus_plutowski</who>
    <bug_when>2025-10-28 05:34:16 -0700</bug_when>
    <thetext>Pull request: https://github.com/WebKit/WebKit/pull/53080</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2157316</commentid>
    <comment_count>3</comment_count>
    <who name="EWS">ews-feeder</who>
    <bug_when>2025-11-07 12:31:20 -0800</bug_when>
    <thetext>Committed 302741@main (051e1cb9aeab): &lt;https://commits.webkit.org/302741@main&gt;

Reviewed commits have been landed. Closing PR #53080 and removing active labels.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>