1285946 - Seccomp sandbox violation: sys_readv called in content process of Firefox desktop

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Julian Hector [:tedd] [:jhector]]

Crash reports show that sys_readv is called in the content process:

https://crash-stats.mozilla.com/search/?product=Firefox&reason=~SIGSYS&address=0x13&_sort=-date&_facets=cpu_arch&_facets=address&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#crash-reports

According to the man page, readv(2) is similar to read(2) except that it fills multiple buffers, so there shouldn't be a reason not to whitelist it.

Comment 1

[Julian Hector [:tedd] [:jhector]]

Attachment: Add sys_readv to seccomp whitelist. r=gcp

Try push for build: https://treeherder.mozilla.org/#/jobs?repo=try&revision=51117438e783

Comment 2

[Gian-Carlo Pascutto [:gcp]]

Comment on attachment 8769750 [details] [diff] [review]
Add sys_readv to seccomp whitelist. r=gcp

Review of attachment 8769750 [details] [diff] [review]:
-----------------------------------------------------------------

Underlying caller is ALSA as well.

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/baf618eb5988
Add sys_readv to seccomp whitelist. r=gcp

Comment 4

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/baf618eb5988