Closed
Bug 1285946
Opened 8 years ago
Closed 8 years ago
Seccomp sandbox violation: sys_readv called in content process of Firefox desktop
Categories
(Core :: Security: Process Sandboxing, defect)
Core
Security: Process Sandboxing
Tracking
()
RESOLVED
FIXED
mozilla50
Tracking | Status | |
---|---|---|
firefox50 | --- | fixed |
People
(Reporter: tedd, Assigned: tedd)
References
Details
Crash Data
Attachments
(1 file)
833 bytes,
patch
|
gcp
:
review+
|
Details | Diff | Splinter Review |
Crash reports show that sys_readv is called in the content process: https://crash-stats.mozilla.com/search/?product=Firefox&reason=~SIGSYS&address=0x13&_sort=-date&_facets=cpu_arch&_facets=address&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#crash-reports According to the man page, readv(2) is similar to read(2) except that it fills multiple buffers, so there shouldn't be a reason not to whitelist it.
Assignee | ||
Comment 1•8 years ago
|
||
Try push for build: https://treeherder.mozilla.org/#/jobs?repo=try&revision=51117438e783
Assignee: nobody → julian.r.hector
Attachment #8769750 -
Flags: review?(gpascutto)
Comment 2•8 years ago
|
||
Comment on attachment 8769750 [details] [diff] [review] Add sys_readv to seccomp whitelist. r=gcp Review of attachment 8769750 [details] [diff] [review]: ----------------------------------------------------------------- Underlying caller is ALSA as well.
Attachment #8769750 -
Flags: review?(gpascutto) → review+
Assignee | ||
Updated•8 years ago
|
Keywords: checkin-needed
Pushed by cbook@mozilla.com: https://hg.mozilla.org/integration/mozilla-inbound/rev/baf618eb5988 Add sys_readv to seccomp whitelist. r=gcp
Keywords: checkin-needed
Comment 4•8 years ago
|
||
bugherder |
https://hg.mozilla.org/mozilla-central/rev/baf618eb5988
Status: NEW → RESOLVED
Closed: 8 years ago
status-firefox50:
--- → fixed
Resolution: --- → FIXED
Target Milestone: --- → mozilla50
Updated•8 years ago
|
Crash Signature: [@ libc-2.21.so@0xe139d ]
You need to log in
before you can comment on or make changes to this bug.
Description
•