Unverified Commit 2e596960 authored by Alexandre Lissy's avatar Alexandre Lissy Committed by Matthew Finkel
Browse files

Bug 1715254 - Deny clone3 to force glibc fallback r=gcp 

Differential Revision: https://phabricator.services.mozilla.com/D117297
parent 75c66822

security/sandbox/linux/SandboxFilter.cpp

+6 −0
Original line number Diff line number Diff line
@@ -633,6 +633,9 @@ class SandboxPolicyCommon : public SandboxPolicyBase { 
      case __NR_clone:

        return ClonePolicy(InvalidSyscall());



      case __NR_clone3:

        return Error(ENOSYS);



        // More thread creation.

#ifdef __NR_set_robust_list

      case __NR_set_robust_list:
@@ -1311,6 +1314,9 @@ class ContentSandboxPolicy : public SandboxPolicyCommon { 
      case __NR_clone:

        return ClonePolicy(Error(EPERM));



      case __NR_clone3:

        return Error(ENOSYS);



#  ifdef __NR_fadvise64

      case __NR_fadvise64:

        return Allow();