Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: cherry-pick 67c9cbc784d6 from chromium #36219

Merged
merged 2 commits into from Nov 2, 2022

Conversation

ppontes
Copy link
Member

@ppontes ppontes commented Nov 1, 2022

Validate source_context in ExtensionHostMsg_OpenChannelToNativeApp.

After this CL, the Browser process will verify source_context in the
IPC payload of the ExtensionHostMsg_OpenChannelToNativeApp message and
avoid processing malformed or spoofed IPCs.

Change-Id: I9466dc076c4d07dbb4bec38973000dc0418565f6
Bug: 1356234
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3854987
Commit-Queue: Łukasz Anforowicz lukasza@chromium.org
Reviewed-by: Devlin Cronin rdevlin.cronin@chromium.org
Cr-Commit-Position: refs/heads/main@{#1041118}

Notes: Security: backported fix for 1356234.

@ppontes ppontes requested review from a team as code owners November 1, 2022 22:06
@ppontes ppontes added 21-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes labels Nov 1, 2022
@electron-cation electron-cation bot added new-pr 🌱 PR opened in the last 24 hours and removed new-pr 🌱 PR opened in the last 24 hours labels Nov 1, 2022
@ppontes ppontes force-pushed the cherry-pick/21-x-y/chromium/67c9cbc784d6 branch from 10d7935 to e35aec1 Compare November 1, 2022 22:10
@ppontes ppontes force-pushed the cherry-pick/21-x-y/chromium/67c9cbc784d6 branch from e35aec1 to f423ae1 Compare November 2, 2022 09:04
@jkleinsc jkleinsc merged commit 86a1ee1 into 21-x-y Nov 2, 2022
@jkleinsc jkleinsc deleted the cherry-pick/21-x-y/chromium/67c9cbc784d6 branch November 2, 2022 17:13
@release-clerk
Copy link

release-clerk bot commented Nov 2, 2022

Release Notes Persisted

Security: backported fix for 1356234.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
21-x-y backport-check-skip Skip trop's backport validity checking security 🔒 semver/patch backwards-compatible bug fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants