Google Git
Sign in
chromium / chromium / src / sandbox / HEAD
  1. 0b58b8b Add non-64-bit versions of allowlisted lib paths by Ben Scarlato · 3 hours ago main
  2. 1d45ac3 base: add RandIntInclusive alias for RandInt by Elly · 26 hours ago
  3. 431d9eb Use span-based file API in process_mitigations_unittest.cc by Jan Keitel · 3 days ago
  4. 571d296 Refactor app shims to call ContentMain by Marijn Kruisselbrink · 7 days ago
  5. 7496885 Enable strict handle checks for sandboxed processes by default by Will Harris · 8 days ago
  6. 523820a Use span-based file API in seccomp_broker_process_unittest.cc by Jan Keitel · 8 days ago
  7. eece4f3 Migrate base::Contains() to std::ranges::contains() in sandbox by Victor Hugo Vianna Silva · 9 days ago
  8. 5f284f3 Promote #warnings to #error by Victor Hugo Vianna Silva · 10 days ago
  9. 2aaae51 Migrate last base::Contains() to .contains() by Victor Hugo Vianna Silva · 10 days ago
  10. e9783fb Remove calls to base::android::GetClass("android/os/Process") by Martin Kong · 13 days ago
  11. 625ddeb Migrate various base::Contains() to contains() in sandbox by Victor Hugo Vianna Silva · 2 weeks ago
  12. d2ebe0a Reland "spanification: automatically spanify .../broker_simple_message_unittest.cc etc." by Roberto Torres · 5 weeks ago
  13. 78d77a7 [tracing] Migrate legacy async macros in various folders by Etienne Pierre-doray · 5 weeks ago
  14. a2dc847 Add SysInfo::AmountOfTotalPhysicalMemory() by Joe Mason · 5 weeks ago
  15. bbd1f34 [Windows] Cleanup Sandbox Process Creation. by James Forshaw · 5 weeks ago
  16. 5aad726 Revert "spanification: automatically spanify .../broker_simple_message_unittest.cc etc." by Sébastien Lalancette · 5 weeks ago
  17. 15a35d3 spanification: automatically spanify .../broker_simple_message_unittest.cc etc. by Roberto Torres · 5 weeks ago
  18. 4ea90f6 [base] Add a feature to not run <kDisplayCritical threads on big cores by Benoît Lizé · 5 weeks ago
  19. fab8cbb [Windows] Remove named interceptions from sandbox. by James Forshaw · 5 weeks ago
  20. d92390b Do IWYU for FRIEND_TEST_ALL_PREFIXES() in headers by Lei Zhang · 6 weeks ago
  21. 77958c6 Stop warmup of dbghelp.dll by Alex Gough · 6 weeks ago
  22. 33ddadc Allow access to paths for Corsola for Landlock GPU policy by Ben Scarlato · 6 weeks ago
  23. e71d5ed [Windows] Move FilterEnvironment to the Windows utilities. by James Forshaw · 6 weeks ago
  24. a659aef Fix more IWYU issues by Victor Hugo Vianna Silva · 6 weeks ago
  25. 41c7004 Revert "Enable network sandbox by default on Windows" by Will Harris · 6 weeks ago
  26. b5aec20 Do IWYU for base/functional/callback.h in various files by Lei Zhang · 7 weeks ago
  27. 4d39397 [Mac] Add sandbox profile and mojom for System Proxy Resolver by krishna dheeraj Pannala · 7 weeks ago
  28. 11ff536 fix arm64 is_running_in_vm_ value by Nir Chachamovitz · 7 weeks ago
  29. 4d9db17 Close Token handles after passing to Windows APIs by Alex Gough · 7 weeks ago
  30. 472241e Tidy restricted_token.h imports by Alex Gough · 8 weeks ago
  31. cd51ebb Remove unused member in RestrictedToken by Alex Gough · 8 weeks ago
  32. 25dd5f2 Enable Translate API for ChromeOS by Jim Pollock · 8 weeks ago
  33. c80df52 Enable network sandbox by default on Windows by Will Harris · 8 weeks ago
  34. 564fe3c Remove metric MPArch.ChildProcessLaunchActivelyInParallel by Alex Gough · 8 weeks ago
  35. 1453ce5 Rename kWindowsSystemProxyResolver to kProxyResolver by krishna dheeraj Pannala · 9 weeks ago
  36. 34d7766 Convert to UNSAFE_TODO in sandbox by Arthur Sonzogni · 9 weeks ago
  37. 395dff5 Improve error message for failed open in Landlock by Ben Scarlato · 9 weeks ago
  38. 989d6a7 Fix android-only deps by Poliudin Viacheslav · 9 weeks ago
  39. e8249a9 Enable WinSboxNoDbghelpWarmup by default by Alex Gough · 9 weeks ago
  40. 5fc454a Remove superfluous callback.h includes from various headers by Lei Zhang · 2 months ago
  41. bb306ef Remove superfluous file_util.h includes in various directories by Lei Zhang · 2 months ago
  42. 68db33d Fix unsafe buffer usage in process_policy_test.cc by Arthur Sonzogni · 3 months ago
  43. 41d75c6 Allow fdatasync and pwrite64 in the gpu process on Linux. by Geoff Lang · 3 months ago
  44. 5361051 Use std::erase_if in sandbox/win/src/broker_services.cc by Jincheol Jo · 3 months ago
  45. 0d1b032 [Win Sbox] Remove parallel launch feature by Will Harris · 3 months ago
  46. 0e81055 [media-effects] Remove kVideoEffects sandbox by ahmedmoussa · 3 months ago
  47. 9fc7505 win: Use TestFuture for testing SpawnTargetAsync by Egor Pasko · 3 months ago
  48. 39b9ce8 win: cleanup: Remove sync process start by Egor Pasko · 3 months ago
  49. fdd9b34 Remove unnecessary //build/config/features.gni imports by Lei Zhang · 3 months ago
  50. 4d5cc47 assistant: clean up code 21 of N by Xiaohui Chen · 3 months ago
  51. ab436d3 sandbox: allow Landlock path for ashmem ASLR by Ben Scarlato · 3 months ago
  52. 5e6b32f Revert "Reland "[Windows] Add a sandbox string class for low-level heap allocations."" by Eriko Kurimoto · 4 months ago
  53. 741e128 Revert "[Windows] Remove named interceptions from sandbox." by Eriko Kurimoto · 4 months ago
  54. e8bea67 [Windows] Remove named interceptions from sandbox. by James Forshaw · 4 months ago
  55. ce9e673 Reland "[Windows] Add a sandbox string class for low-level heap allocations." by James Forshaw · 4 months ago
  56. 8ac5fe1 Revert "[Windows] Add a sandbox string class for low-level heap allocations." by James Forshaw · 4 months ago
  57. 07eaf08 [Windows] Add a sandbox string class for low-level heap allocations. by James Forshaw · 4 months ago
  58. f60c027 android: Allow F_SEAL_WRITE in seccomp-bpf sandbox by Egor Pasko · 4 months ago
  59. c788b67 Change DCHECK_LE to CHECK_LE by Poliudin Viacheslav · 4 months ago
  60. aaba8dc [Windows] Remove CopyNameAndAttributes sandbox utility. by James Forshaw · 4 months ago
  61. f5930ee spanification: automatically spanify .../linux/tests/scoped_temporary_file_unittest.cc etc. by Kalvin Lee · 4 months ago
  62. 0fb9925 [Windows] Convert sandbox policy engine to use wstring_view. by James Forshaw · 4 months ago
  63. 26c560d [Windows] Use wstring_view for sandbox IPC string parameters. by James Forshaw · 4 months ago
  64. 613e2dd Reland "Put the syscall header file in the modulemap." by Matt Stark · 4 months ago
  65. 1f22c98 Log executable name when app container access check fails. by Peter Kasting · 4 months ago
  66. 1668df0 [Win] Add strict handle checks for sandboxed processes behind a feature by Will Harris · 4 months ago
  67. 77087de Move Landlock reporting to avoid seccomp blocks by Ben Scarlato · 4 months ago
  68. ecbd8d9 Linux sandbox: allow MFD_EXEC in gpu policy by Matthew Denton · 4 months ago
  69. 22699fd Linux sandbox: allow MFD_NOEXEC_SEAL by Matthew Denton · 4 months ago
  70. 3b6b042 Fully deprecate RendererCodeIntegrityEnabled policy by Will Harris · 4 months ago
  71. e624a34 Add kwsui64.dll to blocked DLL list for sandboxed processes by Will Harris · 4 months ago
  72. c85ffe3 sandbox: Migrate BASE_FEATURE macros to 2-argument version by Xiaohan Wang · 4 months ago
  73. 42b7740 Report the Landlock status on Android. by Wen Zhao · 4 months ago
  74. 4edeaeb Add mpdenton@ to sandbox OWNERS. by Matthew Denton · 4 months ago
  75. 9953e24 spanification: automatically spanify sandbox/linux/syscall_broker/broker_permission_list.cc etc. by Keishi Hattori · 4 months ago
  76. 75d9481 Add feature to warmup dbghelp while crashers are fixed by Alex Gough · 4 months ago
  77. f6421c2 Linux sandbox: allow memfd_create in gpu and audio sandboxes by Matthew Denton · 5 months ago
  78. a91ff16 Reland "Delayload oleaut32 and dbghelp" by Alex Gough · 5 months ago
  79. 94c45fa Revert "Delayload oleaut32 and dbghelp" by luci-bisection@appspot.gserviceaccount.com · 5 months ago
  80. ec98050 Delayload oleaut32 and dbghelp by Alex Gough · 5 months ago
  81. 940cd29 Improve SecurityDescriptor::ToAbsolute() by Arthur Sonzogni · 5 months ago
  82. b4b0c2f Replace memset with aggregate initialization in sandbox by Arthur Sonzogni · 5 months ago
  83. 8ffce2e Update classes to match chrome style requirements by Hans Wennborg · 5 months ago
  84. 670299a Delete helpers for creating executable shared memory by Daniel Cheng · 5 months ago
  85. 8387ad9 Add MAP_DROPPABLE for glibc 2.41 by Matt Jolly · 5 months ago
  86. 1ffadee spanification: automatically spanify sandbox/linux/services/credentials.cc by Yuki Shiino · 5 months ago
  87. ae139bd [CodeHealth] Replace `std::unique_ptr<char[]>` with `base::HeapArray` in `service_resolver_unittest.cc`. by Michael Tatarski · 5 months ago
  88. 160a3f8 ondevice: Increase ODML memory limit on Windows by Robbie McElrath · 5 months ago
  89. e22a429 Reland "Use base::ByteCount in base::SysInfo." by François Doray · 5 months ago
  90. 36abb51 Skip Landlock when landlock_create_ruleset() is blocked by seccomp by Ben Scarlato · 5 months ago
  91. ab48d93 Revert "Use base::ByteCount in base::SysInfo." by Peter Pakkenberg · 5 months ago
  92. f5e7a58 Use base::ByteCount in base::SysInfo. by François Doray · 5 months ago
  93. c6292b2 [Mac] Correctly deallocate sandbox error buffers and prevent crash resulting from nullptr assignment by Christine Hollingsworth · 5 months ago
  94. 9fdd75f Android: Migrate C++ uses of build_info.h to their split-out equivalents (misc dirs) by Andrew Grieve · 5 months ago
  95. 41b0961 [Spatial Audio] Add sandbox requirements for Spatial Audio by Syed AbuTalib · 6 months ago
  96. f69aab0 Add reference to Landlock policy bug in README. by Maya Warren · 6 months ago
  97. 7104319 [Mac] Add fuzzer for applying the serialized sandbox policy by Christine Hollingsworth · 6 months ago
  98. 4f64990 Restrict prlimit64 syscall as getrlimit in CrOS IME Service sandbox. by Bao-Duy Tran · 6 months ago
  99. 8ab1f18 Reland "Adding file descriptor info to crash key when ioctl fails for better debugging." by Wen Zhao · 6 months ago
  100. e4211c7 Mark some more UNSAFE_BUFFERS() in chrome for raw_ptrs by Tom Sepez · 6 months ago