Attachment 350213 Details for Bug 189740 – Patch

[patch] Patch

bug-189740-20180920180815.patch (text/plain), 3.20 KB, created by Yacine Bandou on 2018-09-20 09:08:16 PDT

(hide)

Description:

Filename:

MIME Type:

Creator: Yacine Bandou

Created: 2018-09-20 09:08:16 PDT

Size: 3.20 KB

patch

obsolete

>Subversion Revision: 236165
>diff --git a/Source/WebCore/ChangeLog b/Source/WebCore/ChangeLog
>index 9fcb657142ed7fe2503cc27f7bdae634efdf21e4..0c35e3138c1b66701dfbf638e514d41310441afe 100644
>--- a/Source/WebCore/ChangeLog
>+++ b/Source/WebCore/ChangeLog
>@@ -1,3 +1,21 @@
>+2018-09-19  Yacine Bandou  <yacine.bandou@softathome.com>
>+
>+        [EME] Add WebM sanitization
>+        https://bugs.webkit.org/show_bug.cgi?id=189740
>+
>+        Reviewed by NOBODY (OOPS!).
>+
>+        This patch adds support for sanitizing the WebM initialization data,
>+        ensures there are no bogus values.
>+        See https://www.w3.org/TR/encrypted-media/#dom-mediakeysession-generaterequest.
>+
>+        Tests: imported/w3c/web-platform-tests/encrypted-media/clearkey-generate-request-disallowed-input.https.html
>+
>+        * Modules/encryptedmedia/InitDataRegistry.cpp:
>+        (WebCore::sanitizeWebM): Added implementation, check if the initialization data doesn't empty and its size
>+        should be less than 64KB, return the buffer copy if it is ok, otherwise a nullptr.
>+        (WebCore::extractKeyIDsWebM): Added implementation.
>+
> 2018-09-19  Philippe Normand <pnormand@igalia.com>
> 
>         [GStreamer] Add support for AV1 decoding
>diff --git a/Source/WebCore/Modules/encryptedmedia/InitDataRegistry.cpp b/Source/WebCore/Modules/encryptedmedia/InitDataRegistry.cpp
>index fb3e4c089d645eeacf74fa5d00522b3c9809f78f..1e2e8335339a37fc42e8954f912888da8fef6954 100644
>--- a/Source/WebCore/Modules/encryptedmedia/InitDataRegistry.cpp
>+++ b/Source/WebCore/Modules/encryptedmedia/InitDataRegistry.cpp
>@@ -41,6 +41,10 @@ namespace WebCore {
> 
> namespace {
>     const uint32_t kCencMaxBoxSize = 64 * KB;
>+    // ContentEncKeyID has this EBML code [47][E2] in WebM,
>+    // as per spec the size of the ContentEncKeyID is encoded on 16 bits.
>+    // https://matroska.org/technical/specs/index.html#ContentEncKeyID/
>+    const uint32_t kWebMMaxContentEncKeyIDSize = 64 * KB; // 2^16
> }
> 
> static std::optional<Vector<Ref<SharedBuffer>>> extractKeyIDsKeyids(const SharedBuffer& buffer)
>@@ -139,18 +143,25 @@ static RefPtr<SharedBuffer> sanitizeCenc(const SharedBuffer& buffer)
> 
> static RefPtr<SharedBuffer> sanitizeWebM(const SharedBuffer& buffer)
> {
>-    // 1. Format
>-    // https://w3c.github.io/encrypted-media/format-registry/initdata/webm.html#format
>-    notImplemented();
>+    // Check if the buffer is a valid WebM initData.
>+    // The WebM initData is the ContentEncKeyID, so should be less than kWebMMaxContentEncKeyIDSize.
>+    if (buffer.isEmpty() || buffer.size() > kWebMMaxContentEncKeyIDSize)
>+        return nullptr;
>+
>     return buffer.copy();
> }
> 
>-static std::optional<Vector<Ref<SharedBuffer>>> extractKeyIDsWebM(const SharedBuffer&)
>+static std::optional<Vector<Ref<SharedBuffer>>> extractKeyIDsWebM(const SharedBuffer& buffer)
> {
>+    Vector<Ref<SharedBuffer>> keyIDs;
>+    RefPtr<SharedBuffer> sanitazedBuffer = sanitizeWebM(buffer);
>+    if (!sanitazedBuffer)
>+        return std::nullopt;
>+
>     // 1. Format
>     // https://w3c.github.io/encrypted-media/format-registry/initdata/webm.html#format
>-    notImplemented();
>-    return std::nullopt;
>+    keyIDs.append(sanitazedBuffer.releaseNonNull());
>+    return keyIDs;
> }
> 
> InitDataRegistry& InitDataRegistry::shared()

Actions: View | Formatted Diff | Diff

Attachments on bug 189740: 350106 | 350108 | 350184 | 350208 | 350213