Closed Bug 1054621 Opened 9 years ago Closed 2 years ago

Create "malicious" media plugins to test GMP sandboxing

Categories

(Core :: Security: Process Sandboxing, defect)

Product:
Core
Component:
Security: Process Sandboxing
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED
Milestone:
91 Branch
Tracking Flags:
Tracking Status
firefox91 --- fixed

People

(Reporter: jld, Assigned: gerard-majax)

References

(Blocks 3 open bugs)

Details

(Whiteboard: sb+)

Attachments

(1 file, 1 obsolete file)

Bug 1054621 - Add GMPlugin Sandbox Tests r?handyman,bryce
48 bytes, text/x-phabricator-request
Details | Review 
We should have testing that verifies that the GMP sandbox is actually effectively accomplishing sandboxing: load a plugin that (depending on the test case) tries to directly access the filesystem or network, or otherwise escape the sandbox, and then verify that the action in question doesn't succeed.

We'll need to be careful about adding cases to this testsuite corresponding to bugs founds later on, because at minimum they'd constitute proof-of-concept exploits for earlier versions, but we can cross that bridge when we come to it.
These bugs are fit and finish issues that might block EME uplift to Aurora.
Blocks: eme-m3
No longer blocks: eme-m3
Move process sandboxing bugs to the new Bugzilla component.

(Sorry for the bugspam; filter on 3c21328c-8cfb-4819-9d88-f6e965067350.)
Component: Security → Security: Process Sandboxing
Blocks: sb-test
Whiteboard: sb+
See Also: → 1309394

Depends on D116894

Attachment #9226163 - Attachment is obsolete: true
Assignee: nobody → lissyx+mozillians
Status: NEW → ASSIGNED
Depends on: 1652156
Pushed by alissy@mozilla.com:
https://hg.mozilla.org/integration/autoland/rev/4cffc89eeda4
Add GMPlugin Sandbox Tests r=handyman,bryce

https://hg.mozilla.org/mozilla-central/rev/4cffc89eeda4

Status: ASSIGNED → RESOLVED
Closed: 2 years ago
status-firefox91: --- → fixed
Resolution: --- → FIXED
Target Milestone: --- → 91 Branch
You need to log in before you can comment on or make changes to this bug.