Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 67c9cbc784d6 from chromium #36220

Merged
merged 1 commit into from Nov 2, 2022

Conversation

ppontes
Copy link
Member

@ppontes ppontes commented Nov 1, 2022

Validate source_context in ExtensionHostMsg_OpenChannelToNativeApp.

After this CL, the Browser process will verify source_context in the
IPC payload of the ExtensionHostMsg_OpenChannelToNativeApp message and
avoid processing malformed or spoofed IPCs.

Change-Id: I9466dc076c4d07dbb4bec38973000dc0418565f6
Bug: 1356234
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3854987
Commit-Queue: Łukasz Anforowicz lukasza@chromium.org
Reviewed-by: Devlin Cronin rdevlin.cronin@chromium.org
Cr-Commit-Position: refs/heads/main@{#1041118}

Notes: Security: backported fix for 1356234.

@ppontes ppontes requested review from a team as code owners November 1, 2022 22:06
@ppontes ppontes added 20-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Nov 1, 2022
@ppontes ppontes force-pushed the cherry-pick/20-x-y/chromium/67c9cbc784d6 branch from c682a75 to 01f92c4 Compare November 1, 2022 22:12
@ppontes ppontes force-pushed the cherry-pick/20-x-y/chromium/67c9cbc784d6 branch from 01f92c4 to 12fef09 Compare November 2, 2022 09:04
@jkleinsc jkleinsc merged commit 30046ca into 20-x-y Nov 2, 2022
@jkleinsc jkleinsc deleted the cherry-pick/20-x-y/chromium/67c9cbc784d6 branch November 2, 2022 13:15
@release-clerk
Copy link

release-clerk bot commented Nov 2, 2022

Release Notes Persisted

Security: backported fix for 1356234.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
20-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants