1286852 - Seccomp sandbox violation: sys_munlock called in content process of Firefox desktop

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[Julian Hector [:tedd] [:jhector]]

Crash reports show that sys_munlock is called in the content process:

https://crash-stats.mozilla.com/search/?product=Firefox&reason=~SIGSYS&address=0x96&_sort=-date&_facets=cpu_arch&_facets=address&_columns=date&_columns=signature&_columns=product&_columns=version&_columns=build_id&_columns=platform#crash-reports

This is the counter part to Bug 1285771

Comment 2

[Julian Hector [:tedd] [:jhector]]

Attachment: Add sys_munlock to seccomp whitelist. r=gcp

Try push: https://treeherder.mozilla.org/#/jobs?repo=try&revision=e9c69a96119a

Comment 3

[Julian Hector [:tedd] [:jhector]]

Try is in Comment 2

Comment 4

[Carsten Book [:Tomcat]]

has problems to apply:

applying munlock.patch
patching file security/sandbox/linux/SandboxFilter.cpp
Hunk #1 FAILED at 640
1 out of 1 hunks FAILED -- saving rejects to file security/sandbox/linux/SandboxFilter.cpp.rej
patch failed, unable to continue (try -v)
patch failed, rejects left in working directory
errors during apply, please fix and qrefresh munlock.patch

Comment 5

[Gian-Carlo Pascutto [:gcp]]

https://hg.mozilla.org/integration/mozilla-inbound/rev/59d21113b4619c117c178b86ec8c7fd5d7fb5807
Bug 1286852 - Add sys_munlock to seccomp whitelist. r=gcp

Comment 6

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/59d21113b461