gecko-dev/security
David Major 6efaa8b1cd Bug 1523526 - Don't allow CFG on old releases of Windows for arm64 r=bobowen,aklotz
There's a bug in ole32.dll on arm64 versions of Windows prior to 1809, that crashes our content processes if we enable CFG. We've reported the issue, but even if it gets fixed, we can't assume users will have the update.

This patch uses process mitigation policy flags to disable CFG on arm64 before 1809. Based on testing, we only need to do this in the sandbox for child processes, and it's not strictly necessary for the launcher stub to set the flag on the main process. But I've included that anyway as a guard against some yet-undiscovered scenario that might hit the issue and make the browser unusable.

The effects of this patch won't be visible until we actually enable CFG in a subsequent landing.

Differential Revision: https://phabricator.services.mozilla.com/D29474

--HG--
extra : moz-landing-system : lando
2019-05-20 17:25:30 +00:00
..
apps bug 1549249 - build bustage follow-up r=mt,dveditz a=tomprince 2019-05-07 00:16:00 +00:00
certverifier Bug 1551177 - avoid searching unproductive certificate paths during verification r=jcj,KevinJacobs 2019-05-18 00:15:54 +00:00
ct bug 1515608 - allow end-entity certificates to be trust anchors for compatibility r=jcj 2019-03-18 20:01:02 +00:00
mac/hardenedruntime Bug 1543830 - Add Mac Hardened Runtime entitlement files to the tree r=spohl 2019-04-18 15:56:00 +00:00
manager Bug 1551177 - avoid searching unproductive certificate paths during verification r=jcj,KevinJacobs 2019-05-18 00:15:54 +00:00
nss Bug 1539227 - land NSS NSS_3_44_RTM UPGRADE_NSS_RELEASE, r=me 2019-05-10 22:43:57 +00:00
sandbox Bug 1523526 - Don't allow CFG on old releases of Windows for arm64 r=bobowen,aklotz 2019-05-20 17:25:30 +00:00
.eslintrc.js Bug 1246594 - Enable ESLint rule no-throw-literal by default. r=Standard8 2019-03-19 22:02:42 +00:00
generate_certdata.py
generate_mapfile.py
moz.build Bug 1535226 - Remove uses of XP_WIN32 in Gecko. r=glandium 2019-03-21 01:28:50 +00:00
nss.symbols Bug 1546975 - Cache SSL resumption tokens in necko, r=mayhemer 2019-05-09 22:04:43 +00:00