Bug 1475707 - [Mac] Flash sandbox on Nightly/Beta causes OS X 10.9 file upload dialog Flash plugin crash r=Alex_Gaynor draft
authorHaik Aftandilian <haftandilian@mozilla.com>
Fri, 13 Jul 2018 12:58:40 -0700
changeset 818870 3aa7471f239bd64d9e153e2e7076e99006358f1f
parent 818869 9a8f2341e0e3386e1aeb35c8d8152e750a64f616
child 818968 9ea389c03fc266e3753b06dcffab32df1a2c1af7
child 818969 04885bb5d8b9995559462d373199078b109bfdc5
push id116380
push userhaftandilian@mozilla.com
push dateMon, 16 Jul 2018 18:33:21 +0000
reviewersAlex_Gaynor
bugs1475707
milestone63.0a1
Bug 1475707 - [Mac] Flash sandbox on Nightly/Beta causes OS X 10.9 file upload dialog Flash plugin crash r=Alex_Gaynor Add the com.apple.xpcd service to the Flash plugin sandbox for OS X 10.9 systems to avoid crashes when opening file dialogs. MozReview-Commit-ID: A40Mov98Ddy
security/sandbox/mac/SandboxPolicies.h
--- a/security/sandbox/mac/SandboxPolicies.h
+++ b/security/sandbox/mac/SandboxPolicies.h
@@ -639,16 +639,19 @@ static const char flashPluginSandboxRule
       (global-name "com.apple.pbs.fetch_services")
       (global-name "com.apple.tccd.system")
       (global-name "com.apple.tsm.uiserver")
       (global-name "com.apple.inputmethodkit.launchagent")
       (global-name "com.apple.inputmethodkit.launcher")
       (global-name "com.apple.inputmethodkit.getxpcendpoint")
       (global-name "com.apple.decalog4.incoming")
       (global-name "com.apple.windowserver.active"))
+  ; bug 1475707
+  (if (= macosMinorVersion 9)
+     (allow mach-lookup (global-name "com.apple.xpcd")))
 
   ; Fonts
   (allow file-read*
     (subpath "/Library/Fonts")
     (subpath "/Library/Application Support/Apple/Fonts")
     (home-library-subpath "/Fonts")
     ; Allow read access to paths allowed via sandbox extensions.
     ; This is needed for fonts in non-standard locations normally