Magic-Mirror/gecko-dev
1
0
Fork 0
mirror of https://github.com/mozilla/gecko-dev.git synced 2025-03-01 13:57:32 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Bug 1604269 - Disallow sendmmsg in content. r=gerard-majax

Browse Source 
Differential Revision: https://phabricator.services.mozilla.com/D224311
This commit is contained in:
Gian-Carlo Pascutto 2024-10-02 13:53:07 +00:00
parent 939285cc4f
commit 629103f1ad
1 changed files with 1 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
security/sandbox/linux/SandboxFilter.cpp
View File

@ -1299,9 +1299,6 @@ class ContentSandboxPolicy : public SandboxPolicyCommon {
Maybe<ResultExpr> EvaluateSocketCall(int aCall,
bool aHasArgs) const override {
switch (aCall) {
case SYS_SENDMMSG: // libresolv via libasyncns; see bug 1355274
return Some(Allow());
#ifdef ANDROID
case SYS_SOCKET:
return Some(Error(EACCES));
@ -2040,7 +2037,7 @@ class SocketProcessSandboxPolicy final : public SandboxPolicyCommon {
case SYS_RECVMMSG:
return Some(Allow());
// FIXME(bug 1641401) do we really need this?
// Required for the DNS Resolver thread.
case SYS_SENDMMSG:
return Some(Allow());