mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-18 07:45:30 +00:00
e4f2d0dce9
GConf uses ORBit, which tries to create server sockets, which has been disallowed by the content sandbox seccomp-bpf policy since 55 (bug 1358647). GConf is considered obsolete and hasn't been updated since 2013. This patch disables the use of GConf in content processes, on the assumption that anything that this would break is already broken by rejecting the system call. The one use case that's believed to be broken is using WebRTC behind a mandatory proxy and using system preferences (rather than Firefox's) for the proxy config. WebRTC uses nsIProtocolProxyService in the content process, so if this combination of things is done on a system with GConf, it will not be able to read the system prefs. The larger use case of WebRTC + GConf (with or without a proxy) will crash on Nightly without this patch, because rejected syscalls produce crashes in order to gather more diagnostic information. MozReview-Commit-ID: 6jpBkByzo7n --HG-- extra : rebase_source : 54f28163b78593d25b7a52897162f20e9042bcfe |
||
|---|---|---|
| .. | ||
| moz.build | ||
| nsAlertsIconListener.cpp | ||
| nsAlertsIconListener.h | ||
| nsGConfService.cpp | ||
| nsGConfService.h | ||
| nsGIOService.cpp | ||
| nsGIOService.h | ||
| nsGnomeModule.cpp | ||
| nsGSettingsService.cpp | ||
| nsGSettingsService.h | ||
| nsPackageKitService.cpp | ||
| nsPackageKitService.h | ||
| nsSystemAlertsService.cpp | ||
| nsSystemAlertsService.h | ||