Title: [286009] branches/safari-613.1.8-branch/Source/WebKit
- Revision
- 286009
- Author
- [email protected]
- Date
- 2021-11-18 09:45:08 -0800 (Thu, 18 Nov 2021)
Log Message
Cherry-pick r285886. rdar://problem/85473581
[iOS] Limit graphics related IOKit method filtering
https://bugs.webkit.org/show_bug.cgi?id=233209
<rdar://problem/85473581>
Reviewed by Brent Fulgham.
Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
will enable a replacement for the disabled filtering.
* Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
* Scripts/process-entitlements.sh:
git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285886 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Modified Paths
Diff
Modified: branches/safari-613.1.8-branch/Source/WebKit/ChangeLog (286008 => 286009)
--- branches/safari-613.1.8-branch/Source/WebKit/ChangeLog 2021-11-18 17:33:12 UTC (rev 286008)
+++ branches/safari-613.1.8-branch/Source/WebKit/ChangeLog 2021-11-18 17:45:08 UTC (rev 286009)
@@ -1,5 +1,38 @@
2021-11-18 Alan Coon <[email protected]>
+ Cherry-pick r285886. rdar://problem/85473581
+
+ [iOS] Limit graphics related IOKit method filtering
+ https://bugs.webkit.org/show_bug.cgi?id=233209
+ <rdar://problem/85473581>
+
+ Reviewed by Brent Fulgham.
+
+ Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
+ will enable a replacement for the disabled filtering.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+ * Scripts/process-entitlements.sh:
+
+
+ git-svn-id: https://svn.webkit.org/repository/webkit/trunk@285886 268f45cc-cd09-0410-ab3c-d52691b4dbfc
+
+ 2021-11-16 Per Arne Vollan <[email protected]>
+
+ [iOS] Limit graphics related IOKit method filtering
+ https://bugs.webkit.org/show_bug.cgi?id=233209
+ <rdar://problem/85473581>
+
+ Reviewed by Brent Fulgham.
+
+ Limit graphics related IOKit method filtering based on OS version. This patch also adds an entitlement which
+ will enable a replacement for the disabled filtering.
+
+ * Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in:
+ * Scripts/process-entitlements.sh:
+
+2021-11-18 Alan Coon <[email protected]>
+
Cherry-pick r285889. rdar://problem/85430575
Adjust graphics related message filter
Modified: branches/safari-613.1.8-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in (286008 => 286009)
--- branches/safari-613.1.8-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2021-11-18 17:33:12 UTC (rev 286008)
+++ branches/safari-613.1.8-branch/Source/WebKit/Resources/SandboxProfiles/ios/com.apple.WebKit.WebContent.sb.in 2021-11-18 17:45:08 UTC (rev 286009)
@@ -262,7 +262,7 @@
iokit-external-method
)
(allow iokit-async-external-method
-#if PLATFORM(IOS)
+#if PLATFORM(IOS) && __IPHONE_OS_VERSION_MIN_REQUIRED < 160000
(iokit-method-number
43
44
@@ -270,7 +270,7 @@
#endif
)
(allow iokit-external-method
-#if PLATFORM(IOS)
+#if PLATFORM(IOS) && __IPHONE_OS_VERSION_MIN_REQUIRED < 160000
(iokit-method-number
0
2
Modified: branches/safari-613.1.8-branch/Source/WebKit/Scripts/process-entitlements.sh (286008 => 286009)
--- branches/safari-613.1.8-branch/Source/WebKit/Scripts/process-entitlements.sh 2021-11-18 17:33:12 UTC (rev 286008)
+++ branches/safari-613.1.8-branch/Source/WebKit/Scripts/process-entitlements.sh 2021-11-18 17:45:08 UTC (rev 286009)
@@ -32,6 +32,10 @@
then
plistbuddy add :com.apple.coreaudio.allow-vorbis-decode bool YES
fi
+ if (( "${TARGET_MAC_OS_X_VERSION_MAJOR}" >= 130000 ))
+ then
+ plistbuddy Add :com.apple.private.gpu-restricted bool YES
+ fi
fi
mac_process_webcontent_or_plugin_entitlements
@@ -60,6 +64,11 @@
plistbuddy Add :com.apple.security.cs.jit-write-allowlist bool YES
fi
+ if (( "${TARGET_MAC_OS_X_VERSION_MAJOR}" >= 130000 ))
+ then
+ plistbuddy Add :com.apple.private.gpu-restricted bool YES
+ fi
+
plistbuddy Add :com.apple.private.memory.ownership_transfer bool YES
plistbuddy Add :com.apple.private.webkit.use-xpc-endpoint bool YES
plistbuddy Add :com.apple.rootless.storage.WebKitGPUSandbox bool YES
@@ -279,6 +288,7 @@
plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
+ plistbuddy Add :com.apple.private.gpu-restricted bool YES
plistbuddy Add :com.apple.private.memorystatus bool YES
plistbuddy Add :com.apple.private.network.socket-delegate bool YES
plistbuddy Add :com.apple.private.pac.exception bool YES
@@ -307,6 +317,7 @@
plistbuddy Add :com.apple.mediaremote.set-playback-state bool YES
plistbuddy Add :com.apple.private.allow-explicit-graphics-priority bool YES
plistbuddy Add :com.apple.private.coremedia.extensions.audiorecording.allow bool YES
+ plistbuddy Add :com.apple.private.gpu-restricted bool YES
plistbuddy Add :com.apple.private.mediaexperience.startrecordinginthebackground.allow bool YES
plistbuddy Add :com.apple.private.coremedia.pidinheritance.allow bool YES
plistbuddy Add :com.apple.private.memorystatus bool YES
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
