From 866768c43e15673c1cc343fc86a7c2ab71e3879c Mon Sep 17 00:00:00 2001 From: Bob Owen Date: Wed, 9 Sep 2015 08:45:25 +0100 Subject: [PATCH] Bug 1197943: Turn off MITIGATION_STRICT_HANDLE_CHECKS for NPAPI process sandbox for causing hangs. r=aklotz --- security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp | 6 ------ 1 file changed, 6 deletions(-) diff --git a/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp b/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp index b3acaa4ac8a5..f22e76b92263 100644 --- a/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp +++ b/security/sandbox/win/src/sandboxbroker/sandboxBroker.cpp @@ -228,12 +228,6 @@ SandboxBroker::SetSecurityLevelForPluginProcess(int32_t aSandboxLevel) result = mPolicy->SetProcessMitigations(mitigations); ret = ret && (sandbox::SBOX_ALL_OK == result); - mitigations = - sandbox::MITIGATION_STRICT_HANDLE_CHECKS; - - result = mPolicy->SetDelayedProcessMitigations(mitigations); - ret = ret && (sandbox::SBOX_ALL_OK == result); - // Add the policy for the client side of a pipe. It is just a file // in the \pipe\ namespace. We restrict it to pipes that start with // "chrome." so the sandboxed process cannot connect to system services.