From 179fb3b0a49a72f9b234b343732a0985d481701b Mon Sep 17 00:00:00 2001 From: Haik Aftandilian Date: Mon, 31 Dec 2018 17:23:35 +0000 Subject: [PATCH] Bug 1508277 - Crash in mozilla::gl::SurfaceFactory_IOSurface::CreateShared r=Alex_Gaynor Allow access to device-id and vendor-id IOKit properties needed for AppleIntelHD3000GraphicsGLDriver. Fixes a crash in the AppleIntelHD3000GraphicsGLDriver userland driver which is used in some 2011-era Macs. Differential Revision: https://phabricator.services.mozilla.com/D15528 --HG-- extra : moz-landing-system : lando --- security/sandbox/mac/SandboxPolicies.h | 2 ++ 1 file changed, 2 insertions(+) diff --git a/security/sandbox/mac/SandboxPolicies.h b/security/sandbox/mac/SandboxPolicies.h index c3c024f12504..f65f5bde32f9 100644 --- a/security/sandbox/mac/SandboxPolicies.h +++ b/security/sandbox/mac/SandboxPolicies.h @@ -231,6 +231,8 @@ static const char contentSandboxRules[] = R"SANDBOX_LITERAL( (if (defined? 'iokit-get-properties) (allow iokit-get-properties (iokit-property "board-id") + (iokit-property "vendor-id") + (iokit-property "device-id") (iokit-property "IODVDBundleName") (iokit-property "IOGLBundleName") (iokit-property "IOGVACodec")