Title: [204682] trunk/Source/WebKit2
- Revision
- 204682
- Author
- m...@apple.com
- Date
- 2016-08-20 15:00:11 -0700 (Sat, 20 Aug 2016)
Log Message
[Mac] Web Content service with a restricted entitlement may load arbitrary dylibs
https://bugs.webkit.org/show_bug.cgi?id=156668
<rdar://problem/25429784>
Reviewed by Sam Weinig.
* Configurations/WebContentService.xcconfig: Enable library validation when the Web Content
service is given the XPC domain extension entitlement.
Modified Paths
Diff
Modified: trunk/Source/WebKit2/ChangeLog (204681 => 204682)
--- trunk/Source/WebKit2/ChangeLog 2016-08-20 21:40:29 UTC (rev 204681)
+++ trunk/Source/WebKit2/ChangeLog 2016-08-20 22:00:11 UTC (rev 204682)
@@ -1,3 +1,14 @@
+2016-08-20 Dan Bernstein <m...@apple.com>
+
+ [Mac] Web Content service with a restricted entitlement may load arbitrary dylibs
+ https://bugs.webkit.org/show_bug.cgi?id=156668
+ <rdar://problem/25429784>
+
+ Reviewed by Sam Weinig.
+
+ * Configurations/WebContentService.xcconfig: Enable library validation when the Web Content
+ service is given the XPC domain extension entitlement.
+
2016-08-20 Javier Fernandez <jfernan...@igalia.com>
[GTK] Unreviewed GTK build fix since r204665 and 204668
Modified: trunk/Source/WebKit2/Configurations/WebContentService.xcconfig (204681 => 204682)
--- trunk/Source/WebKit2/Configurations/WebContentService.xcconfig 2016-08-20 21:40:29 UTC (rev 204681)
+++ trunk/Source/WebKit2/Configurations/WebContentService.xcconfig 2016-08-20 22:00:11 UTC (rev 204682)
@@ -27,9 +27,7 @@
CODE_SIGN_ENTITLEMENTS[sdk=macosx*] = $(CODE_SIGN_ENTITLEMENTS_OSX_WITH_XPC_DOMAIN_EXTENSION_$(WK_WEBCONTENT_SERVICE_NEEDS_XPC_DOMAIN_EXTENSION_ENTITLEMENT));
CODE_SIGN_ENTITLEMENTS_OSX_WITH_XPC_DOMAIN_EXTENSION_YES = Configurations/WebContent-OSX.entitlements;
-OTHER_CODE_SIGN_FLAGS[sdk=macosx*] = $(OTHER_CODE_SIGN_FLAGS_macosx_$(TARGET_MAC_OS_X_VERSION_MAJOR));
-OTHER_CODE_SIGN_FLAGS_macosx_101200 = $(WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS);
-OTHER_CODE_SIGN_FLAGS_macosx_101300 = $(OTHER_CODE_SIGN_FLAGS_macosx_101200);
+OTHER_CODE_SIGN_FLAGS[sdk=macosx*] = $(WK_XPC_DOMAIN_EXTENSION_CODE_SIGN_FLAGS);
PRODUCT_NAME = com.apple.WebKit.WebContent$(WK_XPC_SERVICE_SUFFIX);
INFOPLIST_FILE[sdk=iphone*] = WebProcess/EntryPoint/mac/XPCService/WebContentService/Info-iOS.plist;
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
