mirror of
https://github.com/archlinuxarm/PKGBUILDs.git
synced 2024-11-28 22:57:37 +00:00
extra/chromium to 88.0.4324.150-1
This commit is contained in:
Kevin Mihelich
parent
b0ea746995
commit
e6f440bb4f
2 changed files with 152 additions and 3 deletions
|
|
@ -15,8 +15,8 @@ buildarch=12
|
||||||
highmem=1
|
highmem=1
|
||||||
|
|
||||||
pkgname=chromium
|
pkgname=chromium
|
||||||
pkgver=88.0.4324.146
|
pkgver=88.0.4324.150
|
||||||
pkgrel=2
|
pkgrel=1
|
||||||
_launcher_ver=7
|
_launcher_ver=7
|
||||||
_gcc_patchset=3
|
_gcc_patchset=3
|
||||||
pkgdesc="A web browser built for speed, simplicity, and security"
|
pkgdesc="A web browser built for speed, simplicity, and security"
|
||||||
|
|
@ -37,13 +37,15 @@ optdepends=('libpipewire02: WebRTC desktop sharing under Wayland'
|
||||||
source=(https://commondatastorage.googleapis.com/chromium-browser-official/$pkgname-$pkgver.tar.xz
|
source=(https://commondatastorage.googleapis.com/chromium-browser-official/$pkgname-$pkgver.tar.xz
|
||||||
https://github.com/foutrelis/chromium-launcher/archive/v$_launcher_ver/chromium-launcher-$_launcher_ver.tar.gz
|
https://github.com/foutrelis/chromium-launcher/archive/v$_launcher_ver/chromium-launcher-$_launcher_ver.tar.gz
|
||||||
https://github.com/stha09/chromium-patches/releases/download/chromium-${pkgver%%.*}-patchset-$_gcc_patchset/chromium-${pkgver%%.*}-patchset-$_gcc_patchset.tar.xz
|
https://github.com/stha09/chromium-patches/releases/download/chromium-${pkgver%%.*}-patchset-$_gcc_patchset/chromium-${pkgver%%.*}-patchset-$_gcc_patchset.tar.xz
|
||||||
|
chromium-glibc-2.33.patch
|
||||||
subpixel-anti-aliasing-in-FreeType-2.8.1.patch
|
subpixel-anti-aliasing-in-FreeType-2.8.1.patch
|
||||||
0001-crashpad-include-limits.patch
|
0001-crashpad-include-limits.patch
|
||||||
0002-Fix-sandbox-Aw-snap-for-sycalls-403-and-407.patch
|
0002-Fix-sandbox-Aw-snap-for-sycalls-403-and-407.patch
|
||||||
0003-Run-blink-bindings-generation-single-threaded.patch)
|
0003-Run-blink-bindings-generation-single-threaded.patch)
|
||||||
sha256sums=('38b118fbe8bbdf89e4f170ced090088f5eb2bb68f2295abbb0006cc94b7f827d'
|
sha256sums=('ae12e94392986c6b8ea4413356a49bae0a19356ffe2ea95495303cf2decb38c3'
|
||||||
'86859c11cfc8ba106a3826479c0bc759324a62150b271dd35d1a0f96e890f52f'
|
'86859c11cfc8ba106a3826479c0bc759324a62150b271dd35d1a0f96e890f52f'
|
||||||
'e5a60a4c9d0544d3321cc241b4c7bd4adb0a885f090c6c6c21581eac8e3b4ba9'
|
'e5a60a4c9d0544d3321cc241b4c7bd4adb0a885f090c6c6c21581eac8e3b4ba9'
|
||||||
|
'2fccecdcd4509d4c36af873988ca9dbcba7fdb95122894a9fdf502c33a1d7a4b'
|
||||||
'1e2913e21c491d546e05f9b4edf5a6c7a22d89ed0b36ef692ca6272bcd5faec6'
|
'1e2913e21c491d546e05f9b4edf5a6c7a22d89ed0b36ef692ca6272bcd5faec6'
|
||||||
'a4a429b21236b93e4b9c4b77d561c9102b38b2e5f1bc7607b4c92fb2b7a15bde'
|
'a4a429b21236b93e4b9c4b77d561c9102b38b2e5f1bc7607b4c92fb2b7a15bde'
|
||||||
'f0eed8a0f62b59dd9020038a4c5c3a4160abd0327164c345504d04d5be47e7d7'
|
'f0eed8a0f62b59dd9020038a4c5c3a4160abd0327164c345504d04d5be47e7d7'
|
||||||
|
|
@ -107,6 +109,9 @@ prepare() {
|
||||||
third_party/blink/renderer/core/xml/parser/xml_document_parser.cc \
|
third_party/blink/renderer/core/xml/parser/xml_document_parser.cc \
|
||||||
third_party/libxml/chromium/*.cc
|
third_party/libxml/chromium/*.cc
|
||||||
|
|
||||||
|
# https://crbug.com/1164975
|
||||||
|
patch -Np1 -i ../chromium-glibc-2.33.patch
|
||||||
|
|
||||||
# Upstream fixes
|
# Upstream fixes
|
||||||
patch -Np1 -d third_party/skia <../subpixel-anti-aliasing-in-FreeType-2.8.1.patch
|
patch -Np1 -d third_party/skia <../subpixel-anti-aliasing-in-FreeType-2.8.1.patch
|
||||||
|
|
||||||
|
|
|
||||||
144
extra/chromium/chromium-glibc-2.33.patch
Normal file
144
extra/chromium/chromium-glibc-2.33.patch
Normal file
|
|
@ -0,0 +1,144 @@
|
||||||
|
# Patch made by Kevin Kofler <Kevin@tigcc.ticalc.org>
|
||||||
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1904652
|
||||||
|
|
||||||
|
diff -up chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc.fstatfix chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
|
||||||
|
--- chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc.fstatfix 2021-01-25 10:11:45.427436398 -0500
|
||||||
|
+++ chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc 2021-01-25 10:12:51.337699003 -0500
|
||||||
|
@@ -257,6 +257,18 @@ ResultExpr EvaluateSyscallImpl(int fs_de
|
||||||
|
return RestrictKillTarget(current_pid, sysno);
|
||||||
|
}
|
||||||
|
|
||||||
|
+#if defined(__NR_newfstatat)
|
||||||
|
+ if (sysno == __NR_newfstatat) {
|
||||||
|
+ return RewriteFstatatSIGSYS();
|
||||||
|
+ }
|
||||||
|
+#endif
|
||||||
|
+
|
||||||
|
+#if defined(__NR_fstatat64)
|
||||||
|
+ if (sysno == __NR_fstatat64) {
|
||||||
|
+ return RewriteFstatatSIGSYS();
|
||||||
|
+ }
|
||||||
|
+#endif
|
||||||
|
+
|
||||||
|
if (SyscallSets::IsFileSystem(sysno) ||
|
||||||
|
SyscallSets::IsCurrentDirectory(sysno)) {
|
||||||
|
return Error(fs_denied_errno);
|
||||||
|
diff -up chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc.fstatfix chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc
|
||||||
|
--- chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc.fstatfix 2021-01-25 10:13:10.179774081 -0500
|
||||||
|
+++ chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.cc 2021-01-25 10:16:18.790525746 -0500
|
||||||
|
@@ -6,6 +6,8 @@
|
||||||
|
|
||||||
|
#include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h"
|
||||||
|
|
||||||
|
+#include <errno.h>
|
||||||
|
+#include <fcntl.h>
|
||||||
|
#include <stddef.h>
|
||||||
|
#include <stdint.h>
|
||||||
|
#include <string.h>
|
||||||
|
@@ -355,6 +357,35 @@ intptr_t SIGSYSSchedHandler(const struct
|
||||||
|
return -ENOSYS;
|
||||||
|
}
|
||||||
|
|
||||||
|
+intptr_t SIGSYSFstatatHandler(const struct arch_seccomp_data& args,
|
||||||
|
+ void* aux) {
|
||||||
|
+ switch (args.nr) {
|
||||||
|
+#if defined(__NR_newfstatat)
|
||||||
|
+ case __NR_newfstatat:
|
||||||
|
+#endif
|
||||||
|
+#if defined(__NR_fstatat64)
|
||||||
|
+ case __NR_fstatat64:
|
||||||
|
+#endif
|
||||||
|
+#if defined(__NR_newfstatat) || defined(__NR_fstatat64)
|
||||||
|
+ if (*reinterpret_cast<const char *>(args.args[1]) == '\0'
|
||||||
|
+ && args.args[3] == static_cast<uint64_t>(AT_EMPTY_PATH)) {
|
||||||
|
+ return sandbox::sys_fstat64(static_cast<int>(args.args[0]),
|
||||||
|
+ reinterpret_cast<struct stat64 *>(args.args[2]));
|
||||||
|
+ } else {
|
||||||
|
+ errno = EACCES;
|
||||||
|
+ return -1;
|
||||||
|
+ }
|
||||||
|
+ break;
|
||||||
|
+#endif
|
||||||
|
+ }
|
||||||
|
+
|
||||||
|
+ CrashSIGSYS_Handler(args, aux);
|
||||||
|
+
|
||||||
|
+ // Should never be reached.
|
||||||
|
+ RAW_CHECK(false);
|
||||||
|
+ return -ENOSYS;
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
bpf_dsl::ResultExpr CrashSIGSYS() {
|
||||||
|
return bpf_dsl::Trap(CrashSIGSYS_Handler, NULL);
|
||||||
|
}
|
||||||
|
@@ -387,6 +418,10 @@ bpf_dsl::ResultExpr RewriteSchedSIGSYS()
|
||||||
|
return bpf_dsl::Trap(SIGSYSSchedHandler, NULL);
|
||||||
|
}
|
||||||
|
|
||||||
|
+bpf_dsl::ResultExpr RewriteFstatatSIGSYS() {
|
||||||
|
+ return bpf_dsl::Trap(SIGSYSFstatatHandler, NULL);
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
void AllocateCrashKeys() {
|
||||||
|
#if !defined(OS_NACL_NONSFI)
|
||||||
|
if (seccomp_crash_key)
|
||||||
|
diff -up chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h.fstatfix chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h
|
||||||
|
--- chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h.fstatfix 2021-01-25 10:16:36.982598236 -0500
|
||||||
|
+++ chromium-88.0.4324.96/sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h 2021-01-25 10:18:45.705111027 -0500
|
||||||
|
@@ -62,6 +62,10 @@ SANDBOX_EXPORT intptr_t SIGSYSPtraceFail
|
||||||
|
// sched_setparam(), sched_setscheduler()
|
||||||
|
SANDBOX_EXPORT intptr_t SIGSYSSchedHandler(const arch_seccomp_data& args,
|
||||||
|
void* aux);
|
||||||
|
+// If the fstatat syscall is actually a disguised fstat, calls the regular fstat
|
||||||
|
+// syscall, otherwise, crashes in the same way as CrashSIGSYS_Handler.
|
||||||
|
+SANDBOX_EXPORT intptr_t SIGSYSFstatatHandler(const struct arch_seccomp_data& args,
|
||||||
|
+ void* aux);
|
||||||
|
|
||||||
|
// Variants of the above functions for use with bpf_dsl.
|
||||||
|
SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYS();
|
||||||
|
@@ -72,6 +76,7 @@ SANDBOX_EXPORT bpf_dsl::ResultExpr Crash
|
||||||
|
SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSFutex();
|
||||||
|
SANDBOX_EXPORT bpf_dsl::ResultExpr CrashSIGSYSPtrace();
|
||||||
|
SANDBOX_EXPORT bpf_dsl::ResultExpr RewriteSchedSIGSYS();
|
||||||
|
+SANDBOX_EXPORT bpf_dsl::ResultExpr RewriteFstatatSIGSYS();
|
||||||
|
|
||||||
|
// Allocates a crash key so that Seccomp information can be recorded.
|
||||||
|
void AllocateCrashKeys();
|
||||||
|
diff -up chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.cc.fstatfix chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.cc
|
||||||
|
--- chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.cc.fstatfix 2021-01-25 10:18:53.307141311 -0500
|
||||||
|
+++ chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.cc 2021-01-25 10:19:46.982355293 -0500
|
||||||
|
@@ -261,4 +261,13 @@ int sys_sigaction(int signum,
|
||||||
|
|
||||||
|
#endif // defined(MEMORY_SANITIZER)
|
||||||
|
|
||||||
|
+SANDBOX_EXPORT int sys_fstat64(int fd, struct stat64 *buf)
|
||||||
|
+{
|
||||||
|
+#if defined(__NR_fstat64)
|
||||||
|
+ return syscall(__NR_fstat64, fd, buf);
|
||||||
|
+#else
|
||||||
|
+ return syscall(__NR_fstat, fd, buf);
|
||||||
|
+#endif
|
||||||
|
+}
|
||||||
|
+
|
||||||
|
} // namespace sandbox
|
||||||
|
diff -up chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.h.fstatfix chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.h
|
||||||
|
--- chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.h.fstatfix 2021-01-25 10:19:53.115379741 -0500
|
||||||
|
+++ chromium-88.0.4324.96/sandbox/linux/services/syscall_wrappers.h 2021-01-25 10:20:45.485588421 -0500
|
||||||
|
@@ -17,6 +17,7 @@ struct sock_fprog;
|
||||||
|
struct rlimit64;
|
||||||
|
struct cap_hdr;
|
||||||
|
struct cap_data;
|
||||||
|
+struct stat64;
|
||||||
|
|
||||||
|
namespace sandbox {
|
||||||
|
|
||||||
|
@@ -84,6 +85,9 @@ SANDBOX_EXPORT int sys_sigaction(int sig
|
||||||
|
const struct sigaction* act,
|
||||||
|
struct sigaction* oldact);
|
||||||
|
|
||||||
|
+// Recent glibc rewrites fstat to fstatat.
|
||||||
|
+SANDBOX_EXPORT int sys_fstat64(int fd, struct stat64 *buf);
|
||||||
|
+
|
||||||
|
} // namespace sandbox
|
||||||
|
|
||||||
|
#endif // SANDBOX_LINUX_SERVICES_SYSCALL_WRAPPERS_H_
|
||||||
Loading…
Reference in a new issue