Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(28)

Issue 1854323002: [Windows Sandbox] Turn on MITIGATION_EXTENSION_POINT_DISABLE for child processes. (Closed)

Created:
4 years, 8 months ago by penny
Modified:
4 years, 4 months ago
CC:
chromium-reviews, darin-cc_chromium.org, jam, rickyz+watch_chromium.org, caitkp+watch_chromium.org
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

[Windows Sandbox] Turn on MITIGATION_EXTENSION_POINT_DISABLE for child processes. This CL is part of a chain of CLs: 1) "MITIGATION_EXTENSION_POINT_DISABLE support for children" (https://codereview.chromium.org/1835003003) 2) "MITIGATION_EXTENSION_POINT_DISABLE emergency off finch" (https://codereview.chromium.org/1836523004/) 3) "New NT registry API" (https://codereview.chromium.org/1841573002) 4) "Early browser security support" (https://codereview.chromium.org/1656453002) 5) -> THIS 6) "Turn on MITIGATION_EXTENSION_POINT_DISABLE for browser process" (https://codereview.chromium.org/2223783003) This CL only turns on the new mitigation (in all child processes, not the browser process yet). BUG=557798 CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.win:win10_chromium_x64_rel_ng Committed: https://crrev.com/df585142df9fd58299ef02b64da3381d8b733cb8 Committed: https://crrev.com/3087cbe87c1d2cd8a43c55d8ed4d7bbe2d9d9609 Cr-Original-Commit-Position: refs/heads/master@{#409264} Cr-Commit-Position: refs/heads/master@{#410508}

Patch Set 1 #

Patch Set 2 : Added comment. #

Patch Set 3 : Tiny comment change - stop using "we/our". #

Patch Set 4 : Moving this CL over to new branch. Also, updated with latest trunk. #

Patch Set 5 : Update for install_static namespace. #

Patch Set 6 : Seem to have x86 GN build working. Needed content_features for linking. #

Patch Set 7 : Remove DISABLE_EXTENSION_POINT for browser process - until IME support can be fixed. #

Unified diffs Side-by-side diffs Delta from patch set Stats (+43 lines, -1 line) Patch
M chrome/browser/win/chrome_elf_init.cc View 1 2 3 4 5 2 chunks +17 lines, -0 lines 0 comments Download
M components/nacl/broker/BUILD.gn View 1 2 3 4 5 1 chunk +1 line, -0 lines 0 comments Download
M content/app/sandbox_helper_win.cc View 1 1 chunk +3 lines, -0 lines 0 comments Download
M content/common/sandbox_win.cc View 1 2 3 4 5 6 2 chunks +4 lines, -1 line 0 comments Download
M content/public/common/BUILD.gn View 1 2 3 4 5 6 1 chunk +18 lines, -0 lines 0 comments Download

Messages

Total messages: 57 (38 generated)
penny
Hello, This is the final CL that will actually turn on MITIGATION_EXTENSION_POINT_DISABLE. There's no try ...
4 years, 8 months ago (2016-04-12 18:14:56 UTC) #3
Will Harris
content/common/sandbox_win.cc lgtm
4 years, 8 months ago (2016-04-12 18:16:40 UTC) #4
robertshield
lgtm
4 years, 8 months ago (2016-04-14 04:01:58 UTC) #5
ncarter (slow)
content lgtm
4 years, 5 months ago (2016-07-21 23:37:36 UTC) #12
penny
Hello Brad and Derek, Could one of you please review my changes to the GN ...
4 years, 4 months ago (2016-08-02 00:06:02 UTC) #20
bradn
lgtm
4 years, 4 months ago (2016-08-02 15:47:12 UTC) #26
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/1854323002/200001
4 years, 4 months ago (2016-08-02 18:25:22 UTC) #30
commit-bot: I haz the power
Try jobs failed on following builders: chromium_presubmit on master.tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/chromium_presubmit/builds/229453)
4 years, 4 months ago (2016-08-02 18:32:51 UTC) #32
penny
On 2016/08/02 18:32:51, commit-bot: I haz the power wrote: > Try jobs failed on following ...
4 years, 4 months ago (2016-08-02 18:54:16 UTC) #33
bradnelson
lgtm
4 years, 4 months ago (2016-08-02 19:07:12 UTC) #35
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/1854323002/200001
4 years, 4 months ago (2016-08-02 19:07:45 UTC) #36
commit-bot: I haz the power
Committed patchset #6 (id:200001)
4 years, 4 months ago (2016-08-02 19:12:46 UTC) #38
commit-bot: I haz the power
Patchset 6 (id:??) landed as https://crrev.com/df585142df9fd58299ef02b64da3381d8b733cb8 Cr-Commit-Position: refs/heads/master@{#409264}
4 years, 4 months ago (2016-08-02 19:14:55 UTC) #40
penny
A revert of this CL (patchset #6 id:200001) has been created in https://codereview.chromium.org/2227453002/ by pennymac@chromium.org. ...
4 years, 4 months ago (2016-08-08 02:05:13 UTC) #41
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/1854323002/260001
4 years, 4 months ago (2016-08-08 22:08:22 UTC) #49
commit-bot: I haz the power
Try jobs failed on following builders: linux_chromium_chromeos_ozone_rel_ng on master.tryserver.chromium.linux (JOB_FAILED, http://build.chromium.org/p/tryserver.chromium.linux/builders/linux_chromium_chromeos_ozone_rel_ng/builds/214448) mac_chromium_compile_dbg_ng on master.tryserver.chromium.mac (JOB_FAILED, ...
4 years, 4 months ago (2016-08-08 22:40:51 UTC) #51
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.org/1854323002/260001
4 years, 4 months ago (2016-08-08 23:55:08 UTC) #53
commit-bot: I haz the power
Committed patchset #7 (id:260001)
4 years, 4 months ago (2016-08-09 00:14:38 UTC) #55
commit-bot: I haz the power
4 years, 4 months ago (2016-08-09 00:17:00 UTC) #57
Message was sent while issue was closed.
Patchset 7 (id:??) landed as
https://crrev.com/3087cbe87c1d2cd8a43c55d8ed4d7bbe2d9d9609
Cr-Commit-Position: refs/heads/master@{#410508}

Powered by Google App Engine
This is Rietveld 408576698