Title: [243692] trunk/Source/WebKit
- Revision
- 243692
- Author
- [email protected]
- Date
- 2019-04-01 06:02:39 -0700 (Mon, 01 Apr 2019)
Log Message
[GTK][WPE] Fix seccomp rule for blacklisting TIOCSTI
https://bugs.webkit.org/show_bug.cgi?id=196297
Patch by Patrick Griffis <[email protected]> on 2019-04-01
Reviewed by Michael Catanzaro.
More information can be found here: https://www.exploit-db.com/exploits/46594
Note that this sandbox never made it into production so does not
warrant any CVE specific to WebKit.
* UIProcess/Launcher/glib/BubblewrapLauncher.cpp:
(WebKit::setupSeccomp):
Modified Paths
Diff
Modified: trunk/Source/WebKit/ChangeLog (243691 => 243692)
--- trunk/Source/WebKit/ChangeLog 2019-04-01 12:50:44 UTC (rev 243691)
+++ trunk/Source/WebKit/ChangeLog 2019-04-01 13:02:39 UTC (rev 243692)
@@ -1,3 +1,18 @@
+2019-04-01 Patrick Griffis <[email protected]>
+
+ [GTK][WPE] Fix seccomp rule for blacklisting TIOCSTI
+ https://bugs.webkit.org/show_bug.cgi?id=196297
+
+ Reviewed by Michael Catanzaro.
+
+ More information can be found here: https://www.exploit-db.com/exploits/46594
+
+ Note that this sandbox never made it into production so does not
+ warrant any CVE specific to WebKit.
+
+ * UIProcess/Launcher/glib/BubblewrapLauncher.cpp:
+ (WebKit::setupSeccomp):
+
2019-03-31 Wenson Hsieh <[email protected]>
[iOS] Crash when changing inputmode for certain types of focusable elements
Modified: trunk/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp (243691 => 243692)
--- trunk/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp 2019-04-01 12:50:44 UTC (rev 243691)
+++ trunk/Source/WebKit/UIProcess/Launcher/glib/BubblewrapLauncher.cpp 2019-04-01 13:02:39 UTC (rev 243692)
@@ -555,7 +555,7 @@
// https://git.gnome.org/browse/linux-user-chroot
// in src/setup-seccomp.c
struct scmp_arg_cmp cloneArg = SCMP_A0(SCMP_CMP_MASKED_EQ, CLONE_NEWUSER, CLONE_NEWUSER);
- struct scmp_arg_cmp ttyArg = SCMP_A1(SCMP_CMP_EQ, static_cast<scmp_datum_t>(TIOCSTI), static_cast<scmp_datum_t>(0));
+ struct scmp_arg_cmp ttyArg = SCMP_A1(SCMP_CMP_MASKED_EQ, 0xFFFFFFFFu, TIOCSTI);
struct {
int scall;
struct scmp_arg_cmp* arg;
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
