Changeset 268833 in webkit

Timestamp:

Oct 21, 2020, 3:15:55 PM (6 years ago)

Author:

Alan Coon

Message:

Cherry-pick r268507. rdar://problem/70541950

[iOS] Allow additional sysctl reads needed by image decoding
​https://bugs.webkit.org/show_bug.cgi?id=217733
<rdar://problem/68649171>

Reviewed by Per Arne Vollan.

Telemetry on iOS 14 shows that we are hitting some sandbox violations during image decoding. We should
grant access to hw.byteorder, hw.cachelinesize_compat, and hw.vectorunit. We should silence warnings
about hw.cpufrequency_compat since it is not needed in web-facing use cases.

• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:

git-svn-id: ​https://svn.webkit.org/repository/webkit/trunk@268507 268f45cc-cd09-0410-ab3c-d52691b4dbfc

Location:

branches/safari-610-branch/Source/WebKit

Files:

• ChangeLog (modified) (1 diff)
• Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb (modified) (3 diffs)

branches/safari-610-branch/Source/WebKit/ChangeLog

@@ +1 @@
+2020-10-21  Russell Epstein  <repstein@apple.com>
+
+        Cherry-pick r268507. rdar://problem/70541950
+
+    [iOS] Allow additional sysctl reads needed by image decoding
+    https://bugs.webkit.org/show_bug.cgi?id=217733
+    <rdar://problem/68649171>
+    
+    Reviewed by Per Arne Vollan.
+    
+    Telemetry on iOS 14 shows that we are hitting some sandbox violations during image decoding. We should
+    grant access to hw.byteorder, hw.cachelinesize_compat, and hw.vectorunit. We should silence warnings
+    about hw.cpufrequency_compat since it is not needed in web-facing use cases.
+    
+    * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+    
+    
+    git-svn-id: https://svn.webkit.org/repository/webkit/trunk@268507 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+    2020-10-14  Brent Fulgham  <bfulgham@apple.com>
+
+            [iOS] Allow additional sysctl reads needed by image decoding
+            https://bugs.webkit.org/show_bug.cgi?id=217733
+            <rdar://problem/68649171>
+
+            Reviewed by Per Arne Vollan.
+
+            Telemetry on iOS 14 shows that we are hitting some sandbox violations during image decoding. We should
+            grant access to hw.byteorder, hw.cachelinesize_compat, and hw.vectorunit. We should silence warnings
+            about hw.cpufrequency_compat since it is not needed in web-facing use cases.
+
+            * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb:
+
 2020-10-15  Russell Epstein  <repstein@apple.com>
 

branches/safari-610-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb

@@ -613 +613 @@
 
 (deny sysctl-read (with no-report)
-      (sysctl-name "sysctl.proc_native"))
+      (sysctl-name
+          "hw.cpufrequency_compat"
+          "sysctl.proc_native"))
 
 (with-filter (system-attribute apple-internal)
@@ -811 +813 @@
         "hw.activecpu" ;; Needed by JSC engine.
         "hw.availcpu"
+        "hw.byteorder"
         "hw.cachelinesize"
+        "hw.cachelinesize_compat"
         "hw.cpufamily" ;; <rdar://problem/58416475>
         "hw.cputype"
@@ -825 +829 @@
         "hw.physicalcpu_max"
         "hw.product"
+        "hw.vectorunit"
         "kern.bootargs"
         "kern.hostname"