Commit graph

132 commits

Author SHA1 Message Date
Bob Owen
b539721eb8 Bug 928044 Part 2: Enable the content sandbox by default on Windows with an open policy. r=tabraldes,glandium,jimm
--HG--
rename : security/sandbox/win/src/warnonlysandbox/wosCallbacks.h => security/sandbox/win/src/logging/loggingCallbacks.h
rename : security/sandbox/win/src/warnonlysandbox/wosTypes.h => security/sandbox/win/src/logging/loggingTypes.h
rename : security/sandbox/win/src/warnonlysandbox/warnOnlySandbox.cpp => security/sandbox/win/src/logging/sandboxLogging.cpp
rename : security/sandbox/win/src/warnonlysandbox/warnOnlySandbox.h => security/sandbox/win/src/logging/sandboxLogging.h
2014-11-29 17:12:18 +00:00
Stephen Pohl
0b58cd9573 Bug 1077282: Cleanup uses of GreD vs GreBinD, introcuded by v2 signature changes on OSX. Based on initial patch by rstrong. r=bsmedberg 2014-10-10 15:06:57 -04:00
Stephen Pohl
6ff74d5eef Mac v2 signing - Bug 1059504 - Avoid plugin-container from crashing due to the new v2 bundle structure on OSX. r=bsmedberg 2014-09-29 11:51:17 -07:00
Stephen Pohl
7959bd3a2b Mac v2 signing - Bug 1050944 - Get Firefox to launch and run on OSX with the new .app bundle structure, made necessary by Apple's v2 signatures. r=smichaud, r=ted, sr=bsmedberg 2014-09-29 11:51:04 -07:00
Jacek Caban
06efc6492d Bug 1063511 - Fix mingw builds after bug 1027906. r=tabraldes 2014-09-08 10:35:24 +02:00
Bob Owen
f19448274c Bug 1018966 - Part 1: Add the main warn only sandbox machinery - with no Chromium code changes. r=bsmedberg
This change also includes the content sandboxing code on Windows Nightly by defining MOZ_CONTENT_SANDBOX=1.
Whether the content sandbox is disabled, in warn only mode, or enabled is controlled by a new pref: browser.tabs.remote.sandbox=(off/warn/on)
2014-06-11 15:32:37 +01:00
Carsten "Tomcat" Book
d578571a85 Backed out changeset 5adabc2818b2 (bug 1018966) for b2g bustage 2014-09-04 15:14:41 +02:00
Bob Owen
0fdb849687 Bug 1018966 - Part 1: Add the main warn only sandbox machinery - with no Chromium code changes. r=bsmedberg r=tabraldes
This change also includes the content sandboxing code on Windows Nightly by defining MOZ_CONTENT_SANDBOX=1.
Whether the content sandbox is disabled, in warn only mode, or enabled is controlled by a new pref: browser.tabs.remote.sandbox=(off/warn/on)
2014-06-11 15:32:37 +01:00
Josh Aas
85d03dd759 Bug 1059479 - remove Chromium path service and trace events code. r=bent 2014-09-02 14:23:58 -05:00
Ehsan Akhgari
8e138d4419 Bug 1060997 - Fix more bad implicit constructors in IPC; r=smaug 2014-08-31 21:12:55 -04:00
Tim Abraldes
ba6539ecd7 bug 1027906. Set delayed token level for GMP plugin processes to USER_RESTRICTED. Whitelist certain files and registry keys that are required for EME plugins to successfully load. r=bobowen. r=jesup. r=bent. 2014-08-29 17:34:26 -07:00
Jacek Caban
319bc9cc73 Bug 1042426 - Added --disable-sandbox option that disables building sandbox code. r=glandium 2014-08-27 16:32:55 +02:00
Georg Fritzsche
1630e406c3 Bug 1041525 - Remove workaround for GMP SyncRunnable deadlock in Crashreporter::OOPInit() r=jesup 2014-07-24 18:16:08 +02:00
Randell Jesup
9fe91aeaea Bug 1041525: Disable GMP OOPInit() during SyncLaunch() until crashreporting fully hooked up r=gfritzsche 2014-07-21 10:24:29 -04:00
Randell Jesup
bcf9fd60a8 Backed out changeset 40954106dc7a (bug 1041525) (incorrect patch landed) 2014-07-21 10:24:25 -04:00
Randell Jesup
b51510d73a Bug 1041525: Disable GMP OOPInit() during SyncLaunch() until crashreporting fully hooked up r=gfritzsche 2014-07-21 09:59:13 -04:00
Benjamin Smedberg
80cf96cd26 Bug 1033522 - Only initialize the Windows Group ID for plugin processes: other process types don't need it. Refactor the saved GRE dir to use a path rather than a non-threadsafe nsIFile object, r=jimm
--HG--
extra : rebase_source : d15c56da6cc5679516b259a6fc7efb31b070f715
2014-07-17 11:15:09 -04:00
Tim Abraldes
1aaa7148c1 bug 985252. Build sandbox code regardless of whether --enable-content-sandbox/MOZ_CONTENT_SANDBOX is provided. Enable sandboxing of GMP plugins. Enable SandboxBroker to set different security policies for different process types. r=bbondy, r=cpearce, r=bent 2014-07-16 16:01:34 -07:00
Mike Hommey
5870ddf891 Bug 1022259 - Only load Gtk+2 stub for plugin processes in Gtk+3 builds. r=bent,r=karlt 2014-06-10 16:00:42 +09:00
Emilio Pozuelo Monfort
1da5892669 Bug 624422 - Let plugin-container load libmozgtk2. r=glandium 2014-05-01 13:37:48 +02:00
Birunthan Mohanathas
d9e420fc7c Bug 869836 - Part 12: Use Assign('c') instead of AssignLiteral("c"). r=ehsan
--HG--
extra : rebase_source : a6b15019cee452973dd8bf3112c15e14175855a9
2014-05-26 21:55:08 +03:00
Birunthan Mohanathas
0e6f3a6562 Bug 869836 - Part 3: Use Append('c') instead of AppendLiteral("c"). r=ehsan 2014-05-22 06:48:51 +03:00
Josh Aas
b0e94d5a46 Bustage fix for Gecko Media Plugins landing, bug 957928. 2014-05-17 23:25:36 -05:00
Josh Aas
7ec76f43f8 Bug 957928: Gecko Media Plugins implementation. No consumers in Gecko yet. r=bent 2014-05-17 22:05:46 -05:00
Phil Ringnalda
127b904678 Back out a4b51aff4b3c (bug 957928) for build bustage
CLOSED TREE
2014-05-17 17:43:07 -07:00
Josh Aas
992d7074a3 Bug 957928: Gecko Media Plugins implementation. No consumers in Gecko yet. r=bent 2014-05-17 18:53:03 -05:00
Dave Hylands
b3befb9df9 Bug 988410 - Move directory service calls onto MainThread. r=bent 2014-04-04 12:16:16 -07:00
Jed Davis
ae7a935120 Bug 943174 - Avoid waitpid on already-reaped content processes. r=bsmedberg 2014-03-21 08:50:07 -04:00
Honza Bambas
bbe169ea7d Bug 977339 - Do GECKO_SEPARATE_NSPR_LOGS=1 by default, r=jduell 2014-03-05 14:01:09 +01:00
Josh Aas
5df343e52c Bug 957883: Handle channel errors during process launch such that we don't sit on a dead channel for the full time-out (e.g. 45 secs for NPAPI), and allow us to detect when an error happens during child process init. Also, now that it's possible, actually check for an error during NPAPI child process init. r=bsmedberg 2014-01-11 21:51:00 -06:00
Ehsan Akhgari
ae6b29e6ac Bug 951207 - Rename the chromium LOG macro to CHROMIUM_LOG; r=bent 2013-12-17 13:26:45 -05:00
Jacek Caban
919a5b3c9b Bug 945245 - Fixed misc char16_t/wchar_t mismatches. r=ehsan
--HG--
extra : rebase_source : fcab74b295b513f4185cf9c12f31ebaddb7c8e0e
2013-12-03 16:09:50 +01:00
Brian R. Bondy
152817226f Bug 928042 - Add an environment variable to disable content processes sandboxing even when MOZ_CONTENT_SANDBOX is defined. r=aklotz 2013-11-01 19:09:45 -07:00
Brian R. Bondy
eba93af7a1 Bug 925571 - Initial Windows content process sandbox broker code. r=aklotz 2013-10-30 16:58:52 -07:00
Thinker Lee ext:(%2C%20Cervantes%20Yu%20%3Ccyu%40mozilla.com%3E)
140b811282 Bug 771765 - Support template content process, part 2: IPC and glue changes. r=bent
Changes include:
* Getting/resetting platform thread ID.
* Creating an IPC channel with existing file descriptor sent from the template process.
* Child process host with existing process forked from the template.
2013-05-31 21:16:54 +08:00
Ryan VanderMeulen
a4125b396c Backed out changeset 09274cc38453 (bug 869167) for OSX crashes. 2013-08-16 16:56:06 -04:00
Andrey Zaytsev
4cf3ec0900 Bug 869167 - Firefox hangs on Mac when ASan-built plugin is used in non-ASan build. r=bsmedberg 2013-08-16 15:31:03 -04:00
Mark Hammond
52f4cb206c Bug 902790 - prevent browser crash if child process fails to start. r=jlebar 2013-08-09 16:23:24 +10:00
Mike Shal
1c7eb2843f Bug 889787 - Define XP_LINUX globally; r=ted 2013-07-16 17:10:10 -04:00
Shelly Lin
96a46d1102 Bug 811636 - Close the child FD in the parent asap in order to detect when the child closes its FD. r=dhylands 2013-07-09 10:37:33 +08:00
Mike Hommey
aaed6c5d7f Bug 859763 - Remove more remains of the old linker. r=blassey 2013-04-10 09:02:32 +02:00
Chris Jones
bc9b3368d7 Bug 786631, part 2: Make the prelaunch process totipotent and specialize when it's taken. r=jlebar 2013-01-17 12:06:36 -08:00
Chris Jones
d6f21e8891 Back out bug 786631 2013-01-17 12:49:56 -08:00
Chris Jones
e97fb1ad7f Bug 786631, part 2: Make the prelaunch process totipotent and specialize when it's taken. r=jlebar 2013-01-17 12:06:36 -08:00
Landry Breuil
01d2dc34a6 Bug 830303 - Fix plugin-container LD_LIBRARY_PATH on BSD (regression from 753046) r=cjones 2013-01-14 22:38:17 +01:00
Chris Jones
fb825fe86d Rollup of bug 821192: Ensure that content processes don't see an inconsistent app dir. r=bent,dhylands
Bug 821192, part 1: Fix the watchdog timeout code. r=dhylands
Bug 821192, part 2: Add an interface to join all live content processes. r=bent
Bug 821192, part 3: Join all subprocesses before restarting the main process, when we're e.g. about to apply an update. r=dhylands
2012-12-28 01:45:16 -08:00
Jim Mathies
d768d99a05 Bug 820200 - Pass application directory to XRE_InitEmbedding2 in content process. r=bsmedberg 2012-12-18 10:24:42 -06:00
Ms2ger
711f1fd480 Bug 787933 - Stop using stdin types in IPC code; r=bsmedberg+cjones sr=cjones 2012-09-17 10:37:20 +02:00
Randell Jesup
65539ef89c Bug 773151: Convert nsCAutoString->nsAutoCString CLOSED TREE r=bsmedberg 2012-09-01 22:35:17 -04:00
Chris Jones
0e062741d9 Bug 782456, part 1: Let clients of GeckoChildProcessHost specify privileges. r=bent 2012-08-29 09:24:48 -03:00