gecko-dev/security
Jed Davis 2d6db34852 Bug 1690921 - Limit IPC sendmsg gather list sizes based on socket buffer capacity. r=mccr8,gcp
When setting up calls to `sendmsg` for IPC on Unix systems, we generate
`iovec`s for the entire message or until the `IOV_MAX` limit is reached,
whichever comes first.  However, messages can be very large (up to 256
MiB currently), while the OS socket buffer is relatively small (8KiB on
macOS and FreeBSD, ~200KiB on Linux).

This patch detects the socket buffer size with the `SO_SNDBUF` socket
option and cuts off the `iovec` array after it's reached; it also adjusts
the Linux sandbox policy to allow reading that value in all processes.

On my test machines this increases throughput on large messages by about
2.5x on macOS (from ~0.3 to ~0.7 GB/s), but on Linux the improvement is
only about 5% (most of the running time is spent elsewhere).

Differential Revision: https://phabricator.services.mozilla.com/D105852
2021-03-12 21:12:10 +00:00
..
apps Bug 1682989 - remove CertBlocklist implementation and MOZ_NEW_CERT_STORAGE build variable r=rmf 2021-01-19 22:11:25 +00:00
certverifier Backed out changeset 4f957141bf5f (bug 1689726) for GTest failures in psm_TrustOverrideTest.CheckCertDNIsInList. CLOSED TREE 2021-03-11 03:51:08 +02:00
ct Bug 1654103: Standardize on Black for Python code in mozilla-central. 2020-10-26 18:34:53 +00:00
mac/hardenedruntime
manager Bug 1697847 - Update crossbeam-utils in the tree. r=firefox-build-system-reviewers,mhentges,sheehan 2021-03-11 18:15:44 +00:00
nss Bug 1694020 - land NSS 61e70233f80e UPGRADE_NSS_RELEASE, r=beurdouche 2021-03-11 11:59:55 +00:00
sandbox Bug 1690921 - Limit IPC sendmsg gather list sizes based on socket buffer capacity. r=mccr8,gcp 2021-03-12 21:12:10 +00:00
.eslintrc.js
generate_certdata.py Bug 1654103: Standardize on Black for Python code in mozilla-central. 2020-10-26 18:34:53 +00:00
generate_mapfile.py Bug 1654103: Standardize on Black for Python code in mozilla-central. 2020-10-26 18:34:53 +00:00
moz.build Backed out changeset 0b714d638157 (Bug 1692990) as it cause system nss build to fail. r=padenot 2021-02-19 10:22:17 +00:00
nss.symbols Bug 1641178 - Add NSSCipherStrategy. r=dom-workers-and-storage-reviewers,jcj,janv 2021-03-12 09:31:57 +00:00