1287984 - Content process cannot open GPU process DIBs

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, defect)

Description

[David Anderson [:dvander] - inactive, e-mail if emergency]

When enabling the GPU process, this code here fails:

  http://searchfox.org/mozilla-central/source/gfx/layers/TextureDIB.cpp#346

It looks like we get ERROR_ACCESS_DENIED. When I turn off the content sandbox it works.

Testing the GPU process needs a bunch of patches that haven't landed yet, unfortunately. They should be landing soon though. The working branch is here[1].

[1] https://github.com/dvander/gecko-dev/tree/gpu-process

Comment 1

[Bob Owen (:bobowen)]

So this is handles from the content process, as you said originally.
We don't have the rule to allow Section handles to be duplicated to other child processes.
I'll upload a patch.

In theory we would need this for duplication to GMP processes as well.
However that duplication function falls back to the process attempting the duplication itself and as the GMP normally runs at untrusted the content process can duplicate to it.
If you turn off just the GMP sandbox this then fails.

As the GPU process isn't sandboxed yet, you will also need to add GeckoProcessType_GPU to the following if statement:
https://github.com/dvander/gecko-dev/blob/gpu-process/ipc/glue/GeckoChildProcessHost.cpp#L1122

Hopefully that will be it.

Comment 2

[Bob Owen (:bobowen)]

Attachment: Bug 1287984: Add rule to allow content process to duplicate handles to other non-broker processes.

Review commit: https://reviewboard.mozilla.org/r/65576/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/65576/

Comment 3

[Jim Mathies [:jimm]]

(In reply to Bob Owen (:bobowen) (less responsive 21st-29th) from comment #1)

> As the GPU process isn't sandboxed yet, you will also need to add
> GeckoProcessType_GPU to the following if statement:
> https://github.com/dvander/gecko-dev/blob/gpu-process/ipc/glue/
> GeckoChildProcessHost.cpp#L1122
> 
> Hopefully that will be it.

Lets get a bug filed on this sitting under e10s-gpu.

Comment 4

[Jim Mathies [:jimm]]

Comment on attachment 8772860 [details]
Bug 1287984: Add rule to allow content process to duplicate handles to other non-broker processes.

https://reviewboard.mozilla.org/r/65576/#review63190

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/4ed590c96a36
Add rule to allow content process to duplicate handles to other non-broker processes. r=jimm

Comment 6

[Carsten Book [:Tomcat]]

https://hg.mozilla.org/mozilla-central/rev/4ed590c96a36