1286527 - Seccomp sandbox violation: sys_semop called in content process of Firefox desktop

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Julian Hector [:tedd] [:jhector]]

Crash reports show that sys_semop is called in the content process:

https://crash-stats.mozilla.com/search/?product=Firefox&reason=~SIGSYS&address=0x41&_sort=-date&_facets=cpu_arch&_facets=address&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#crash-reports

Comment 1

[Julian Hector [:tedd] [:jhector]]

Attachment: Add sys_semop to seccomp whitelist. r=gcp

Try push for build: https://treeherder.mozilla.org/#/jobs?repo=try&revision=82a40884686f

Comment 2

[Gian-Carlo Pascutto [:gcp]]

Comment on attachment 8770530 [details] [diff] [review]
Add sys_semop to seccomp whitelist. r=gcp

Review of attachment 8770530 [details] [diff] [review]:
-----------------------------------------------------------------

ALSA is the underlying caller, but this looks harmless.

Comment 3

[Julian Hector [:tedd] [:jhector]]

Please check in Bug 1286413 before this one, otherwise there may be merge conflicts.

Comment 4

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/9dc4452707f8
Add sys_semop to seccomp whitelist. r=gcp

Comment 7

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/9dc4452707f8