From 30110df460c6141020e5da25a401e1fb683e00a1 Mon Sep 17 00:00:00 2001
From: Martin Stransky <stransky@redhat.com>
Date: Wed, 30 Jun 2021 12:24:15 +0200
Subject: Added fix for mozbz#1715254 (rhbz#1976892)

---
 mozilla-1715254.patch | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 mozilla-1715254.patch

(limited to 'mozilla-1715254.patch')

diff --git a/mozilla-1715254.patch b/mozilla-1715254.patch
new file mode 100644
index 0000000..662a9d8
--- /dev/null
+++ b/mozilla-1715254.patch
@@ -0,0 +1,24 @@
+diff --git a/security/sandbox/linux/SandboxFilter.cpp b/security/sandbox/linux/SandboxFilter.cpp
+--- a/security/sandbox/linux/SandboxFilter.cpp
++++ b/security/sandbox/linux/SandboxFilter.cpp
+@@ -858,6 +858,9 @@
+       case __NR_clone:
+         return ClonePolicy(InvalidSyscall());
+ 
++      case __NR_clone3:
++        return Error(ENOSYS);
++
+         // More thread creation.
+ #ifdef __NR_set_robust_list
+       case __NR_set_robust_list:
+@@ -1504,6 +1507,9 @@
+       case __NR_clone:
+         return ClonePolicy(Error(EPERM));
+ 
++      case __NR_clone3:
++        return Error(ENOSYS);
++
+ #  ifdef __NR_fadvise64
+       case __NR_fadvise64:
+         return Allow();
+
-- 
cgit