Security/Sandbox/2014-12-18

« previous week | index | next week »

Windows

• Content Sandboxing
  • bug 1110760: Sandboxed processes crash in Vista 64-bit. Have a working patch locally, need to tidy up and push to try. Then get feedback.
    • This affects the GMP process as well.
• GMP/EME Sandboxing
  • cpeterson waiting for security team review of CDM sandbox DLLs
  • bug 1094370: USER_LOCKDOWN is currently causing the load of the GMP dll to fail. Need to investigate further.

Linux/B2G

• Content Sandboxing
  • Work on getting enough of a filesystem broker for B2G proceeds — a try run is within a few bugs (and a lot of FIXMEs) of passing.

Mac

• Content Sandboxing
  • start adjusting rules in a real build of FF, up to now I used FF in the build directory, with hard coded paths to the file system, now I build a disk image (./mach install doesn't work on Mac), and copy FF to the Applications directory, so have to take into account FF app directory and user's home directory, plus paths to resources change a lot

• Other Mac work
  • Rewrite plugin keyboard input in January

Chromium

• Minor cleanup landing — bug 1111810, bug 1112747, GC'ing ipc_message_utils.h to follow.
• bug 958895 is now properly divided into child bugs.