Closed Bug 1429643 Opened 2 years ago Closed 2 years ago

Restrict SSL brokering in NPAPI process to 64-bit builds

Categories

(Core :: Security: Process Sandboxing, enhancement, P1)

Unspecified
Windows
enhancement

Tracking

()

RESOLVED FIXED
mozilla60
Tracking Status
firefox60 --- fixed

People

(Reporter: handyman, Assigned: handyman)

References

Details

(Whiteboard: sb+)

Attachments

(1 file, 1 obsolete file)

The APIs brokered in bug 1382251 only need to be brokered in 64-bit builds.  32-bit builds can rely on Adobe's sandbox.
Priority: -- → P1
This is simple -- it sets up a plugin quirk to gate brokering of SSL operations and turns on that quirk in 64-bit builds.
Attachment #8942971 - Flags: review?(jmathies)
Comment on attachment 8942971 [details] [diff] [review]
Limit Win32 NPAPI SSL brokering to 64-bit builds

Review of attachment 8942971 [details] [diff] [review]:
-----------------------------------------------------------------

lgtm!
Attachment #8942971 - Flags: review?(jmathies) → review+
Whiteboard: sb+
Comment on attachment 8942971 [details] [diff] [review]
Limit Win32 NPAPI SSL brokering to 64-bit builds

refreshed patch
Attachment #8942971 - Attachment is obsolete: true
Keywords: checkin-needed
Pushed by archaeopteryx@coole-files.de:
https://hg.mozilla.org/integration/mozilla-inbound/rev/3018e377678c
Limit Win32 NPAPI SSL brokering to 64-bit builds; r=jimm
Keywords: checkin-needed
https://hg.mozilla.org/mozilla-central/rev/3018e377678c
Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla60
You need to log in before you can comment on or make changes to this bug.