diff options
author | Martin Stransky <stransky@redhat.com> | 2018-05-25 15:54:43 +0200 |
---|---|---|
committer | Martin Stransky <stransky@redhat.com> | 2018-05-25 15:54:43 +0200 |
commit | caaf3e9d69be3c8613d6b44eaf77323318af49d3 (patch) | |
tree | fe390ff066a55e71892633d790bc766c704f2c74 | |
parent | Merge branch 'master' into f27 (diff) | |
parent | Added fix for mozbz#1462640 - Sandbox disables eglGetDisplay() call on Wayla... (diff) | |
download | librewolf-fedora-ff-caaf3e9d69be3c8613d6b44eaf77323318af49d3.tar.gz librewolf-fedora-ff-caaf3e9d69be3c8613d6b44eaf77323318af49d3.tar.bz2 librewolf-fedora-ff-caaf3e9d69be3c8613d6b44eaf77323318af49d3.zip |
Merge branch 'master' into f27
-rw-r--r-- | firefox.spec | 4 | ||||
-rw-r--r-- | rb245262.patch | 29 |
2 files changed, 33 insertions, 0 deletions
diff --git a/firefox.spec b/firefox.spec index ca3b69c..a34f715 100644 --- a/firefox.spec +++ b/firefox.spec @@ -178,6 +178,7 @@ Patch459: mozilla-1463753.patch Patch560: rb244010.patch Patch561: rb244012.patch Patch562: rb246410.patch +Patch563: rb245262.patch # Debian patches Patch500: mozilla-440908.patch @@ -372,6 +373,7 @@ This package contains results of tests executed during build. %patch560 -p1 -b .rb244010 %patch561 -p1 -b .rb244012 %patch562 -p1 -b .rb246410 +%patch563 -p1 -b .rb245262 %endif %{__rm} -f .mozconfig @@ -910,6 +912,8 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || : %changelog * Fri May 25 2018 Martin Stransky <stransky@redhat.com> - 60.0.1-3 - Added fix for mozbz#1436242 (rhbz#1577277) - Firefox IPC crashes. +- Added fix for mozbz#1462640 - Sandbox disables eglGetDisplay() + call on Wayland/EGL backend. * Fri May 25 2018 Martin Stransky <stransky@redhat.com> - 60.0.1-2 - Enable Wayland backend. diff --git a/rb245262.patch b/rb245262.patch new file mode 100644 index 0000000..25550b5 --- /dev/null +++ b/rb245262.patch @@ -0,0 +1,29 @@ +diff --git a/security/sandbox/linux/SandboxFilter.cpp b/security/sandbox/linux/SandboxFilter.cpp +--- a/security/sandbox/linux/SandboxFilter.cpp ++++ b/security/sandbox/linux/SandboxFilter.cpp +@@ -1048,16 +1048,24 @@ public: + + case __NR_mprotect: + case __NR_brk: + case __NR_madvise: + // libc's realloc uses mremap (Bug 1286119); wasm does too (bug 1342385). + case __NR_mremap: + return Allow(); + ++ // Bug 1462640: Mesa libEGL uses mincore to test whether values ++ // are pointers, for reasons. ++ case __NR_mincore: { ++ Arg<size_t> length(1); ++ return If(length == getpagesize(), Allow()) ++ .Else(SandboxPolicyCommon::EvaluateSyscall(sysno)); ++ } ++ + case __NR_sigaltstack: + return Allow(); + + #ifdef __NR_set_thread_area + case __NR_set_thread_area: + return Allow(); + #endif + + |