CVE-2024-27850
Overview
Advisory: Apple Security Advisory
Impact:
Description: A maliciously crafted webpage may be able to fingerprint the user
Researchers: an anonymous researcher
| Attribute | Value |
|---|---|
| CVE | CVE-2024-27850 |
| Bugzilla | 270767 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | medium |
| Commit | a451fac2e9034eaf… |
| Advisory | Apple Advisory |
Root Cause Analysis
This issue was addressed with improvements to the noise injection algorithm.
Files Changed
Source Files
Source/WebKit/ChangeLogSource/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
Patch Preview
diff --git a/Source/WebKit/ChangeLog b/Source/WebKit/ChangeLog
index 30328cf6e845..c83f5658a6fb 100644
--- a/Source/WebKit/ChangeLog
+++ b/Source/WebKit/ChangeLog
@@ -1,3 +1,13 @@
+2020-12-14 Carlos Garcia Campos <[email protected]>
+
+ [WPE][GTK] Should enable WebProcessCache
+ https://bugs.webkit.org/show_bug.cgi?id=219689
+
+ Reviewed by Adrian Perez de Castro.
+
+ * UIProcess/API/glib/WebKitWebContext.cpp:
+ (webkitWebContextConstructed):
+
2020-12-13 Yusuke Suzuki <[email protected]>
[JSC] Introduce vmEntryCustomAccessor and vmEntryHostFunction for JITCage
diff --git a/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp b/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
index f7faa5880bf0..acf9ccdb6d12 100644
--- a/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
+++ b/Source/WebKit/UIProcess/API/glib/WebKitWebContext.cpp
@@ -391,6 +391,7 @@ static void webkitWebContextConstructed(GObject* object)
API::ProcessPoolConfiguration configuration;
configuration.setInjectedBundlePath(FileSystem::stringFromFileSystemRepresentation(bundleFilename.get()));
+ configuration.setUsesWebProcessCache(true);
#if PLATFORM(GTK)
configuration.setProcessSwapsOnNavigation(priv->psonEnabled);
#if !USE(GTK4)