1096125 - [EME] Whitelist BCrypt.dll and Crypt32.dll

Status: RESOLVED FIXED

(Core :: Audio/Video, defect)

Description

[Chris Pearce [:cpearce (Not reading bugmail)]]

Adobe's guys would like BCrypt.dll and Crypt32.dll added to the sandbox's DLL whitelist. They want to use these functions to do the Output Protection Manager handshake. There doesn't seem to be anything worrisome exported by these DLLs, so I think we should just do it.

Comment 1

[Chris Pearce [:cpearce (Not reading bugmail)]]

Attachment: Patch

Add DLLs to whitelist.

Comment 2

[Bob Owen (:bobowen)]

Chris (Pearce), only just read your other email, I'll get this landed.

My only concern is whether any of the functions could be used for fingerprinting.
I'm not really the right person to look at that sort of thing, so I think it is important that we get someone who knows more about it to look through the DLLs that will be loaded.

Chris (Peterson) - I think this sort of thing is one of the important things to be looked at in a security review.
They would need to look through all the DLLs in the white-list as well as those that are already loaded anyway. If any of the latter of these cause problems we may be able to unload them.

It may well be that the sandbox will stop any troublesome functions from working, but we need to be able to test this.

Comment 3

[Bob Owen (:bobowen)]

remote:   https://hg.mozilla.org/integration/mozilla-inbound/rev/c129289d32d6

Comment 4

[Chris Pearce [:cpearce (Not reading bugmail)]]

Just heard from Adobe, they figured out how to work around this. We don't need to whitelist these extra DLLs, so I think we should refrain from doing so unless we find a new reason in future. I will backout this changeset once the tree reopens.

Sorry for the churn.

Comment 5

[Chris Pearce [:cpearce (Not reading bugmail)]]

Backed out the behaviour change:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4814f960dca2

I left the comment corrections on the WMF audio DLLs from the original patch.

Comment 6

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

https://hg.mozilla.org/mozilla-central/rev/c129289d32d6

Comment 7

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/4814f960dca2

Comment 8

[Chris Pearce [:cpearce (Not reading bugmail)]]

Mass update firefox-status to track EME uplift.