1429643 - Restrict SSL brokering in NPAPI process to 64-bit builds

Status: RESOLVED FIXED

(Core :: Security: Process Sandboxing, enhancement, P1)

Description

[David Parks [:handyman]]

The APIs brokered in bug 1382251 only need to be brokered in 64-bit builds.  32-bit builds can rely on Adobe's sandbox.

Comment 1

[David Parks [:handyman]]

Attachment: Limit Win32 NPAPI SSL brokering to 64-bit builds

This is simple -- it sets up a plugin quirk to gate brokering of SSL operations and turns on that quirk in 64-bit builds.

Comment 2

[Jim Mathies [:jimm]]

Comment on attachment 8942971 [details] [diff] [review]
Limit Win32 NPAPI SSL brokering to 64-bit builds

Review of attachment 8942971 [details] [diff] [review]:
-----------------------------------------------------------------

lgtm!

Comment 3

[David Parks [:handyman]]

Comment on attachment 8942971 [details] [diff] [review]
Limit Win32 NPAPI SSL brokering to 64-bit builds

refreshed patch

Comment 4

[David Parks [:handyman]]

Attachment: Limit Win32 NPAPI SSL Brokering to 64-bit builds (r=jimm)

Comment 5

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/mozilla-inbound/rev/3018e377678c
Limit Win32 NPAPI SSL brokering to 64-bit builds; r=jimm

Comment 6

[Andreea Pavel [:apavel]]

https://hg.mozilla.org/mozilla-central/rev/3018e377678c