Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 816f1ebffac4b57b5a734c89c7baea99d4444fec
https://github.com/WebKit/WebKit/commit/816f1ebffac4b57b5a734c89c7baea99d4444fec
Author: Yijia Huang <[email protected]>
Date: 2025-06-10 (Tue, 10 Jun 2025)
Changed paths:
M Source/WebKit/WebProcess/com.apple.WebProcess.sb.in
Log Message:
-----------
Allow mincore() in WebProcess sandbox to fix failures in CaptivePortal
https://bugs.webkit.org/show_bug.cgi?id=294289
rdar://94211256
Reviewed by Yusuke Suzuki and Per Arne Vollan.
Unblock mincore() in the WebProcess sandbox. CaptivePortal and other components
running in the WebProcess context were seeing a high failure rate of mincore()
calls.
This was likely due to SYS_mincore being explicitly blocked in lockdown mode.
This patch moves SYS_mincore from the restricted lockdown syscall list into the
allowed syscall list for WebProcess, enabling proper memory residency checks.
* Source/WebKit/WebProcess/com.apple.WebProcess.sb.in:
Canonical link: https://commits.webkit.org/296074@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
