Skip to content

GitLab

Commit 03c34e0b authored by Timothy Pearson's avatar Timothy Pearson
Browse files

Update to Chromium 129.0.6668.58

parent 6135ee13
Expand all Hide whitespace changes
Inline Side-by-side
Showing with 354 additions and 430 deletions
README
View file @ 03c34e0b
=================================================================================
VERSION
128.0.6613.137
129.0.6668.58
=================================================================================
APPLICATION
......@@ -13,7 +13,21 @@ quilt push -a
=================================================================================
MINIMUM SYSTEM REQUIREMENTS
LLVM 17 or higher
**PATCHED** LLVM 17 or higher
**** PATCH REQUIREMENTS ****
LLVM 17 and up miscompile floating point libcalls with signed integer arguments
on all architectures. Since LLVM 16 significantly miscompiles ppc64el code
(leading to Chromium segfaults), LLVM 17 or higher will need to have a patch
applied prior to building Chromium. If this is not done, the browser will
consume massive system resources and randomly crash.
The patch currently resides in a pull request for LLVM on Github:
https://github.com/llvm/llvm-project/pull/109134
This patch applies successfully to Clang 18, which SSC is currently using to
build its production Chromium on POWER packages. Hopefully, it will be
merged shortly and backported to Clang 19 / Clang 18.
**** WARNING ****
LLVM 16 is known to miscompile part of v8!
......
patches/ppc64le/core/add-ppc64-architecture-to-extensions.diff
View file @ 03c34e0b
Index: chromium-128.0.6613.137/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
Index: chromium-129.0.6668.58/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
===================================================================
--- chromium-128.0.6613.137.orig/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
+++ chromium-128.0.6613.137/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
--- chromium-129.0.6668.58.orig/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
+++ chromium-129.0.6668.58/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
@@ -303,6 +303,8 @@ bool ChromeRuntimeAPIDelegate::GetPlatfo
info->arch = extensions::api::runtime::PlatformArch::kMips;
} else if (strcmp(arch, "mips64el") == 0) {
......@@ -20,10 +20,10 @@ Index: chromium-128.0.6613.137/chrome/browser/extensions/api/runtime/chrome_runt
} else {
NOTREACHED_IN_MIGRATION();
return false;
Index: chromium-128.0.6613.137/extensions/common/api/runtime.json
Index: chromium-129.0.6668.58/extensions/common/api/runtime.json
===================================================================
--- chromium-128.0.6613.137.orig/extensions/common/api/runtime.json
+++ chromium-128.0.6613.137/extensions/common/api/runtime.json
--- chromium-129.0.6668.58.orig/extensions/common/api/runtime.json
+++ chromium-129.0.6668.58/extensions/common/api/runtime.json
@@ -98,7 +98,8 @@
{"name": "x86-32", "description": "Specifies the processer architecture as x86-32."},
{"name": "x86-64", "description": "Specifies the processer architecture as x86-64."},
......
patches/ppc64le/core/baseline-isa-3-0.patch
View file @ 03c34e0b
Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
Index: chromium-129.0.6668.58/build/config/compiler/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/build/config/compiler/BUILD.gn
+++ chromium-128.0.6613.137/build/config/compiler/BUILD.gn
@@ -1445,7 +1445,7 @@ config("compiler_cpu_abi") {
--- chromium-129.0.6668.58.orig/build/config/compiler/BUILD.gn
+++ chromium-129.0.6668.58/build/config/compiler/BUILD.gn
@@ -1460,7 +1460,7 @@ config("compiler_cpu_abi") {
cflags += [ "-maix64" ]
ldflags += [ "-maix64" ]
} else {
......@@ -11,10 +11,10 @@ Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
ldflags += [ "-m64" ]
}
} else if (current_cpu == "riscv64") {
Index: chromium-128.0.6613.137/third_party/libvpx/BUILD.gn
Index: chromium-129.0.6668.58/third_party/libvpx/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/third_party/libvpx/BUILD.gn
+++ chromium-128.0.6613.137/third_party/libvpx/BUILD.gn
--- chromium-129.0.6668.58.orig/third_party/libvpx/BUILD.gn
+++ chromium-129.0.6668.58/third_party/libvpx/BUILD.gn
@@ -105,7 +105,7 @@ config("libvpx_config") {
if (current_cpu == "ppc64") {
......@@ -24,11 +24,11 @@ Index: chromium-128.0.6613.137/third_party/libvpx/BUILD.gn
"-maltivec",
"-mvsx",
]
Index: chromium-128.0.6613.137/v8/BUILD.gn
Index: chromium-129.0.6668.58/v8/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/v8/BUILD.gn
+++ chromium-128.0.6613.137/v8/BUILD.gn
@@ -1419,7 +1419,7 @@ config("toolchain") {
--- chromium-129.0.6668.58.orig/v8/BUILD.gn
+++ chromium-129.0.6668.58/v8/BUILD.gn
@@ -1449,7 +1449,7 @@ config("toolchain") {
defines += [ "V8_TARGET_ARCH_PPC_LE" ]
cflags += [
# Enable usage of AltiVec, VSX, and other POWER8 and higher features
......
patches/ppc64le/core/cargo-add-ppc64.diff 0 → 100644
View file @ 03c34e0b
Index: chromium-129.0.6668.58/build/rust/cargo_crate.gni
===================================================================
--- chromium-129.0.6668.58.orig/build/rust/cargo_crate.gni
+++ chromium-129.0.6668.58/build/rust/cargo_crate.gni
@@ -429,7 +429,7 @@ template("cargo_crate") {
rust_abi_target,
]
}
- if (current_cpu == "arm64" || current_cpu == "x64") {
+ if (current_cpu == "arm64" || current_cpu == "x64" || current_cpu == "ppc64") {
args += [
"--pointer-width",
"64",
patches/ppc64le/fixes/fix-breakpad-compile.patch
View file @ 03c34e0b
Index: chromium-128.0.6613.137/third_party/breakpad/BUILD.gn
Index: chromium-129.0.6668.58/third_party/breakpad/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/third_party/breakpad/BUILD.gn
+++ chromium-128.0.6613.137/third_party/breakpad/BUILD.gn
@@ -782,7 +782,6 @@ if (is_linux || is_chromeos || is_androi
--- chromium-129.0.6668.58.orig/third_party/breakpad/BUILD.gn
+++ chromium-129.0.6668.58/third_party/breakpad/BUILD.gn
@@ -785,7 +785,6 @@ if (is_linux || is_chromeos || is_androi
"breakpad/src/client/minidump_file_writer.h",
"breakpad/src/common/convert_UTF.cc",
"breakpad/src/common/convert_UTF.h",
......@@ -10,7 +10,7 @@ Index: chromium-128.0.6613.137/third_party/breakpad/BUILD.gn
"breakpad/src/common/linux/elf_core_dump.cc",
"breakpad/src/common/linux/elf_core_dump.h",
"breakpad/src/common/linux/elfutils.cc",
@@ -814,6 +813,8 @@ if (is_linux || is_chromeos || is_androi
@@ -817,6 +816,8 @@ if (is_linux || is_chromeos || is_androi
configs += [ "//build/config/compiler:no_chromium_code" ]
public_configs = [ ":client_config" ]
......@@ -19,7 +19,7 @@ Index: chromium-128.0.6613.137/third_party/breakpad/BUILD.gn
if (current_cpu == "arm" && is_chromeos_ash) {
# Avoid running out of registers in
# linux_syscall_support.h:sys_clone()'s inline assembly.
@@ -871,7 +872,6 @@ if (is_linux || is_chromeos || is_androi
@@ -874,7 +875,6 @@ if (is_linux || is_chromeos || is_androi
"breakpad/src/client/linux/minidump_writer/minidump_writer_unittest.cc",
"breakpad/src/client/linux/minidump_writer/minidump_writer_unittest_utils.cc",
"breakpad/src/client/linux/minidump_writer/proc_cpuinfo_reader_unittest.cc",
......
patches/ppc64le/fixes/fix-clang-selection.patch
View file @ 03c34e0b
Index: chromium-128.0.6613.137/build/config/BUILDCONFIG.gn
Index: chromium-129.0.6668.58/build/config/BUILDCONFIG.gn
===================================================================
--- chromium-128.0.6613.137.orig/build/config/BUILDCONFIG.gn
+++ chromium-128.0.6613.137/build/config/BUILDCONFIG.gn
--- chromium-129.0.6668.58.orig/build/config/BUILDCONFIG.gn
+++ chromium-129.0.6668.58/build/config/BUILDCONFIG.gn
@@ -138,7 +138,6 @@ declare_args() {
# Set to true when compiling with the Clang compiler.
is_clang = current_os != "linux" ||
......
patches/ppc64le/fixes/fix-different-data-layouts.patch
View file @ 03c34e0b
......@@ -24,11 +24,11 @@ inconsistency in data layouts when targeting this particular platform.
The error reported by the linker is not technically an error, however, only
a warning goosed up by a --fatal-warnings flag.
Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
Index: chromium-129.0.6668.58/build/config/compiler/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/build/config/compiler/BUILD.gn
+++ chromium-128.0.6613.137/build/config/compiler/BUILD.gn
@@ -380,7 +380,7 @@ config("compiler") {
--- chromium-129.0.6668.58.orig/build/config/compiler/BUILD.gn
+++ chromium-129.0.6668.58/build/config/compiler/BUILD.gn
@@ -382,7 +382,7 @@ config("compiler") {
# Linker warnings.
if (fatal_linker_warnings && !is_apple && current_os != "aix" &&
......
patches/ppc64le/fixes/fix-partition-alloc-compile.patch
View file @ 03c34e0b
kIndex: chromium-114.0.5735.45/base/allocator/partition_allocator/partition_alloc.gni
===================================================================
Index: chromium-128.0.6613.137/base/allocator/partition_allocator/partition_alloc.gni
Index: chromium-129.0.6668.58/base/allocator/partition_allocator/partition_alloc.gni
===================================================================
--- chromium-128.0.6613.137.orig/base/allocator/partition_allocator/partition_alloc.gni
+++ chromium-128.0.6613.137/base/allocator/partition_allocator/partition_alloc.gni
--- chromium-129.0.6668.58.orig/base/allocator/partition_allocator/partition_alloc.gni
+++ chromium-129.0.6668.58/base/allocator/partition_allocator/partition_alloc.gni
@@ -19,7 +19,8 @@ if (is_nacl) {
# NaCl targets don't use 64-bit pointers.
has_64_bit_pointers = false
......
patches/ppc64le/fixes/fix-rust-linking.patch
View file @ 03c34e0b
Index: chromium-128.0.6613.137/build/toolchain/gcc_toolchain.gni
Index: chromium-129.0.6668.58/build/toolchain/gcc_toolchain.gni
===================================================================
--- chromium-128.0.6613.137.orig/build/toolchain/gcc_toolchain.gni
+++ chromium-128.0.6613.137/build/toolchain/gcc_toolchain.gni
--- chromium-129.0.6668.58.orig/build/toolchain/gcc_toolchain.gni
+++ chromium-129.0.6668.58/build/toolchain/gcc_toolchain.gni
@@ -441,7 +441,13 @@ template("single_gcc_toolchain") {
# -soname flag is not available on aix ld
soname_flag = "-Wl,-soname=\"$soname\""
......
patches/ppc64le/fixes/fix-rustc.patch
View file @ 03c34e0b
author: Andres Salomon <dilinger@debian.org>
description: allow ppc64le to build by using proper rustc target
Index: chromium-128.0.6613.137/build/config/rust.gni
Index: chromium-129.0.6668.58/build/config/rust.gni
===================================================================
--- chromium-128.0.6613.137.orig/build/config/rust.gni
+++ chromium-128.0.6613.137/build/config/rust.gni
--- chromium-129.0.6668.58.orig/build/config/rust.gni
+++ chromium-129.0.6668.58/build/config/rust.gni
@@ -186,6 +186,8 @@ rust_abi_target = ""
if (is_linux || is_chromeos) {
if (current_cpu == "arm64") {
......
patches/ppc64le/fixes/fix-unknown-warning-option-messages.diff
View file @ 03c34e0b
Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
Index: chromium-129.0.6668.58/build/config/compiler/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/build/config/compiler/BUILD.gn
+++ chromium-128.0.6613.137/build/config/compiler/BUILD.gn
@@ -1844,7 +1844,7 @@ config("default_warnings") {
--- chromium-129.0.6668.58.orig/build/config/compiler/BUILD.gn
+++ chromium-129.0.6668.58/build/config/compiler/BUILD.gn
@@ -1859,7 +1859,7 @@ config("default_warnings") {
# -Wno-class-memaccess warns about hash table and vector in blink.
# But the violation is intentional.
......@@ -11,7 +11,7 @@ Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
cflags_cc += [ "-Wno-class-memaccess" ]
}
@@ -1854,7 +1854,9 @@ config("default_warnings") {
@@ -1869,7 +1869,9 @@ config("default_warnings") {
# Don't warn about "maybe" uninitialized. Clang doesn't include this
# in -Wall but gcc does, and it gives false positives.
......@@ -22,7 +22,7 @@ Index: chromium-128.0.6613.137/build/config/compiler/BUILD.gn
cflags += [ "-Wno-deprecated-declarations" ]
# -Wcomment gives too many false positives in the case a
@@ -1865,7 +1867,9 @@ config("default_warnings") {
@@ -1880,7 +1882,9 @@ config("default_warnings") {
# -Wpacked-not-aligned complains all generated mojom-shared-internal.h
# files.
......
patches/ppc64le/libaom/0001-Add-ppc64-target-to-libaom.patch
View file @ 03c34e0b
......@@ -8,11 +8,11 @@ Subject: [PATCH] Add ppc64 target to libaom
third_party/libaom/cmake_update.sh | 3 +++
2 files changed, 15 insertions(+)
Index: chromium-128.0.6613.137/third_party/libaom/BUILD.gn
Index: chromium-129.0.6668.58/third_party/libaom/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/third_party/libaom/BUILD.gn
+++ chromium-128.0.6613.137/third_party/libaom/BUILD.gn
@@ -275,6 +275,18 @@ if (current_cpu == "arm64") {
--- chromium-129.0.6668.58.orig/third_party/libaom/BUILD.gn
+++ chromium-129.0.6668.58/third_party/libaom/BUILD.gn
@@ -274,6 +274,18 @@ if (current_cpu == "arm64") {
}
}
......@@ -31,7 +31,7 @@ Index: chromium-128.0.6613.137/third_party/libaom/BUILD.gn
static_library("libaom") {
check_includes = false
if (!is_debug && is_win) {
@@ -338,6 +350,9 @@ static_library("libaom") {
@@ -337,6 +349,9 @@ static_library("libaom") {
# This is needed by all arm boards due to aom_arm_cpu_caps()
sources += [ "source/libaom/aom_ports/aarch32_cpudetect.c" ]
}
......@@ -41,11 +41,11 @@ Index: chromium-128.0.6613.137/third_party/libaom/BUILD.gn
if (is_android) {
deps += [ "//third_party/cpu_features:ndk_compat" ]
}
Index: chromium-128.0.6613.137/third_party/libaom/cmake_update.sh
Index: chromium-129.0.6668.58/third_party/libaom/cmake_update.sh
===================================================================
--- chromium-128.0.6613.137.orig/third_party/libaom/cmake_update.sh
+++ chromium-128.0.6613.137/third_party/libaom/cmake_update.sh
@@ -190,6 +190,9 @@ reset_dirs linux/arm64-cpu-detect
--- chromium-129.0.6668.58.orig/third_party/libaom/cmake_update.sh
+++ chromium-129.0.6668.58/third_party/libaom/cmake_update.sh
@@ -189,6 +189,9 @@ reset_dirs linux/arm64-cpu-detect
gen_config_files linux/arm64-cpu-detect \
"${toolchain}/arm64-linux-gcc.cmake ${all_platforms}"
......
patches/ppc64le/sandbox/0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
View file @ 03c34e0b
......@@ -10,10 +10,10 @@ More investigation required.
sandbox/linux/seccomp-bpf/trap.cc | 14 ++++++++++++++
1 file changed, 14 insertions(+)
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf/trap.cc
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf/trap.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf/trap.cc
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf/trap.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf/trap.cc
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf/trap.cc
@@ -236,6 +236,20 @@ void Trap::SigSys(int nr, LinuxSigInfo*
SetIsInSigHandler();
}
......
patches/ppc64le/sandbox/0001-sandbox-Enable-seccomp_bpf-for-ppc64.patch
View file @ 03c34e0b
......@@ -7,10 +7,10 @@ Subject: [PATCH 1/1] sandbox: Enable seccomp_bpf for ppc64
sandbox/features.gni | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: chromium-128.0.6613.137/sandbox/features.gni
Index: chromium-129.0.6668.58/sandbox/features.gni
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/features.gni
+++ chromium-128.0.6613.137/sandbox/features.gni
--- chromium-129.0.6668.58.orig/sandbox/features.gni
+++ chromium-129.0.6668.58/sandbox/features.gni
@@ -9,7 +9,8 @@
use_seccomp_bpf = (is_linux || is_chromeos || is_android) &&
(current_cpu == "x86" || current_cpu == "x64" ||
......
patches/ppc64le/sandbox/0001-sandbox-linux-Implement-partial-support-for-ppc64-sy.patch
View file @ 03c34e0b
......@@ -17,10 +17,10 @@ GNU/Linux environments, but may require expansion elsewhere.
create mode 100644 sandbox/linux/system_headers/ppc64_linux_syscalls.h
create mode 100644 sandbox/linux/system_headers/ppc64_linux_ucontext.h
Index: chromium-128.0.6613.137/sandbox/linux/BUILD.gn
Index: chromium-129.0.6668.58/sandbox/linux/BUILD.gn
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/BUILD.gn
+++ chromium-128.0.6613.137/sandbox/linux/BUILD.gn
--- chromium-129.0.6668.58.orig/sandbox/linux/BUILD.gn
+++ chromium-129.0.6668.58/sandbox/linux/BUILD.gn
@@ -383,6 +383,8 @@ component("sandbox_services") {
source_set("sandbox_services_headers") {
......@@ -30,10 +30,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/BUILD.gn
"system_headers/arm64_linux_syscalls.h",
"system_headers/arm_linux_syscalls.h",
"system_headers/arm_linux_ucontext.h",
Index: chromium-128.0.6613.137/sandbox/linux/system_headers/linux_syscalls.h
Index: chromium-129.0.6668.58/sandbox/linux/system_headers/linux_syscalls.h
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/system_headers/linux_syscalls.h
+++ chromium-128.0.6613.137/sandbox/linux/system_headers/linux_syscalls.h
--- chromium-129.0.6668.58.orig/sandbox/linux/system_headers/linux_syscalls.h
+++ chromium-129.0.6668.58/sandbox/linux/system_headers/linux_syscalls.h
@@ -35,5 +35,9 @@
#include "sandbox/linux/system_headers/arm64_linux_syscalls.h"
#endif
......@@ -44,10 +44,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/system_headers/linux_syscalls.h
+
#endif // SANDBOX_LINUX_SYSTEM_HEADERS_LINUX_SYSCALLS_H_
Index: chromium-128.0.6613.137/sandbox/linux/system_headers/ppc64_linux_syscalls.h
Index: chromium-129.0.6668.58/sandbox/linux/system_headers/ppc64_linux_syscalls.h
===================================================================
--- /dev/null
+++ chromium-128.0.6613.137/sandbox/linux/system_headers/ppc64_linux_syscalls.h
+++ chromium-129.0.6668.58/sandbox/linux/system_headers/ppc64_linux_syscalls.h
@@ -0,0 +1,12 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
......@@ -61,10 +61,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/system_headers/ppc64_linux_syscalls
+//TODO: is it necessary to redefine syscall numbers for PPC64?
+
+#endif // SANDBOX_LINUX_SYSTEM_HEADERS_PPC64_LINUX_SYSCALLS_H_
Index: chromium-128.0.6613.137/sandbox/linux/system_headers/ppc64_linux_ucontext.h
Index: chromium-129.0.6668.58/sandbox/linux/system_headers/ppc64_linux_ucontext.h
===================================================================
--- /dev/null
+++ chromium-128.0.6613.137/sandbox/linux/system_headers/ppc64_linux_ucontext.h
+++ chromium-129.0.6668.58/sandbox/linux/system_headers/ppc64_linux_ucontext.h
@@ -0,0 +1,12 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
......
patches/ppc64le/sandbox/0001-sandbox-linux-Update-IsSyscallAllowed-in-broker_proc.patch
View file @ 03c34e0b
......@@ -7,10 +7,10 @@ Subject: [PATCH] sandbox/linux: Update IsSyscallAllowed in broker_process.cc
sandbox/linux/syscall_broker/broker_process.cc | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
Index: chromium-128.0.6613.137/sandbox/linux/syscall_broker/broker_process.cc
Index: chromium-129.0.6668.58/sandbox/linux/syscall_broker/broker_process.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/syscall_broker/broker_process.cc
+++ chromium-128.0.6613.137/sandbox/linux/syscall_broker/broker_process.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/syscall_broker/broker_process.cc
+++ chromium-129.0.6668.58/sandbox/linux/syscall_broker/broker_process.cc
@@ -169,7 +169,7 @@ bool BrokerProcess::IsSyscallBrokerable(
#if defined(__NR_fstatat64)
case __NR_fstatat64:
......
patches/ppc64le/sandbox/0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
View file @ 03c34e0b
......@@ -12,10 +12,10 @@ Subject: [PATCH] sandbox/linux: Update syscall helpers/lists for ppc64
sandbox/linux/services/syscall_wrappers.cc | 2 +-
6 files changed, 73 insertions(+), 55 deletions(-)
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
@@ -90,7 +90,8 @@ bool IsBaselinePolicyWatched(int sysno)
SyscallSets::IsPrctl(sysno) ||
SyscallSets::IsProcessGroupOrSession(sysno) ||
......@@ -54,10 +54,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/baseline_policy
if (SyscallSets::IsSocketCall(sysno))
return RestrictSocketcallCommand();
#endif
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
@@ -36,7 +36,7 @@
#include "sandbox/linux/system_headers/linux_time.h"
......@@ -146,10 +146,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_paramet
PTRACE_GETREGS, PTRACE_GETFPREGS, PTRACE_GET_THREAD_AREA,
PTRACE_GETREGSET,
#endif
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.h
@@ -52,7 +52,7 @@ SANDBOX_EXPORT bpf_dsl::ResultExpr Restr
// O_NONBLOCK | O_SYNC | O_LARGEFILE | O_CLOEXEC | O_NOATIME.
SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictFcntlCommands();
......@@ -159,10 +159,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_paramet
// Restrict socketcall(2) to only allow socketpair(2), send(2), recv(2),
// sendto(2), recvfrom(2), shutdown(2), sendmsg(2) and recvmsg(2).
SANDBOX_EXPORT bpf_dsl::ResultExpr RestrictSocketcallCommand();
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
@@ -29,7 +29,8 @@ bool SyscallSets::IsAllowedGettime(int s
switch (sysno) {
case __NR_gettimeofday:
......@@ -582,10 +582,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
case __NR_vserver:
#endif
return true;
Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
Index: chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
+++ chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
--- chromium-129.0.6668.58.orig/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
+++ chromium-129.0.6668.58/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
@@ -46,13 +46,14 @@ class SANDBOX_EXPORT SyscallSets {
static bool IsDeniedGetOrModifySocket(int sysno);
......@@ -623,10 +623,10 @@ Index: chromium-128.0.6613.137/sandbox/linux/seccomp-bpf-helpers/syscall_sets.h
// Big system V multiplexing system call.
static bool IsSystemVIpc(int sysno);
#endif
Index: chromium-128.0.6613.137/sandbox/linux/services/syscall_wrappers.cc
Index: chromium-129.0.6668.58/sandbox/linux/services/syscall_wrappers.cc
===================================================================
--- chromium-128.0.6613.137.orig/sandbox/linux/services/syscall_wrappers.cc
+++ chromium-128.0.6613.137/sandbox/linux/services/syscall_wrappers.cc
--- chromium-129.0.6668.58.orig/sandbox/linux/services/syscall_wrappers.cc
+++ chromium-129.0.6668.58/sandbox/linux/services/syscall_wrappers.cc
@@ -61,7 +61,7 @@ long sys_clone(unsigned long flags,
#if defined(ARCH_CPU_X86_64)
return syscall(__NR_clone, flags, child_stack, ptid, ctid, tls);
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Powered by Integricloud