Open Bug 1835586 Opened 2 years ago Updated 2 years ago

Enable MITIGATION_DYNAMIC_CODE_DISABLE (Arbitrary Code Guard, ACG) in GPU process on Windows

Categories

(Core :: Security: Process Sandboxing, enhancement, P3)

Product:
Core
Component:
Security: Process Sandboxing
Platform:
All
Unspecified
Type:
enhancement

Tracking

()

People

(Reporter: Tom25519, Unassigned)

References

(Blocks 1 open bug)

Details

Is seems that the GPU process does not use JIT: https://bugzilla.mozilla.org/show_bug.cgi?id=1834742#c0, so I think we could enable ACG in GPU process on Windows.

Would need some testing to verify that's nothing unexpected running in the GPU process that has a JIT (not just our JIT). We had this in the past with msmpeg, though it looks like that was both fixed/worked around (https://bugzilla.mozilla.org/show_bug.cgi?id=1783223) and should be in RDD or Utility now.

Blocks: 1381050
Severity: -- → S3
Status: UNCONFIRMED → NEW
Ever confirmed: true
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.