mirror of
https://bitbucket.org/chromiumembedded/cef
synced 2025-06-05 21:39:12 +02:00
Update to Chromium revision 5fdc0fab (#520840)
- Windows now builds with clang by default.
This commit is contained in:
@@ -1,18 +1,18 @@
|
||||
diff --git content/common/sandbox_win.cc content/common/sandbox_win.cc
|
||||
index 3c8150376bbe..5d505838ec1d 100644
|
||||
--- content/common/sandbox_win.cc
|
||||
+++ content/common/sandbox_win.cc
|
||||
@@ -783,8 +783,11 @@ sandbox::ResultCode StartSandboxedProcess(
|
||||
diff --git services/service_manager/sandbox/win/sandbox_win.cc services/service_manager/sandbox/win/sandbox_win.cc
|
||||
index b66f6b27b4e4..56f69739320a 100644
|
||||
--- services/service_manager/sandbox/win/sandbox_win.cc
|
||||
+++ services/service_manager/sandbox/win/sandbox_win.cc
|
||||
@@ -757,8 +757,11 @@ sandbox::ResultCode SandboxWin::StartSandboxedProcess(
|
||||
#endif
|
||||
|
||||
// Post-startup mitigations.
|
||||
- mitigations = sandbox::MITIGATION_STRICT_HANDLE_CHECKS |
|
||||
- sandbox::MITIGATION_DLL_SEARCH_ORDER;
|
||||
+ mitigations = sandbox::MITIGATION_DLL_SEARCH_ORDER;
|
||||
+ if (!browser_command_line.HasSwitch("win-rt-app")) {
|
||||
+ if (!launcher_process_command_line.HasSwitch("win-rt-app")) {
|
||||
+ // Don't enable this mitigation in WinRT apps. See issue #2274.
|
||||
+ mitigations |= sandbox::MITIGATION_STRICT_HANDLE_CHECKS;
|
||||
+ }
|
||||
if (base::FeatureList::IsEnabled(features::kWinSboxForceMsSigned))
|
||||
mitigations |= sandbox::MITIGATION_FORCE_MS_SIGNED_BINS;
|
||||
|
||||
if (base::FeatureList::IsEnabled(
|
||||
service_manager::features::kWinSboxForceMsSigned) &&
|
||||
!cmd_line->HasSwitch(switches::kAllowThirdPartyModules)) {
|
||||
|
Reference in New Issue
Block a user