From 921827bbc78717f514ebd11bf55ac0dd2fe9308c Mon Sep 17 00:00:00 2001 From: mtklein Date: Tue, 16 Jun 2015 13:23:03 -0700 Subject: Add a note to SkGlobalInitialization_chromium.cpp. BUG=chromium:486947 Review URL: https://codereview.chromium.org/1193453004 --- src/ports/SkGlobalInitialization_chromium.cpp | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/src/ports/SkGlobalInitialization_chromium.cpp b/src/ports/SkGlobalInitialization_chromium.cpp index 0f7d71b207..b3eb3aa743 100644 --- a/src/ports/SkGlobalInitialization_chromium.cpp +++ b/src/ports/SkGlobalInitialization_chromium.cpp @@ -61,6 +61,23 @@ #include "SkMatrixImageFilter.h" #include "SkXfermodeImageFilter.h" +// !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! +// +// Adding new classes to Init() below has security consequences in Chrome. +// +// In particular, it is important that we don't create code paths that +// deserialize untrusted data as SkImageFilters; SkImageFilters are sent from +// Chrome renderers (untrusted) to the main (trusted) process. +// +// If you add a new SkImageFilter here _or_ other effect that can be part of +// an SkImageFilter, it's a good idea to have chrome-security@google.com sign +// off on the CL, and at minimum extend SampleFilterFuzz.cpp to fuzz it. +// +// SkPictures are untrusted data. Please be extremely careful not to allow +// SkPictures created in a Chrome renderer to be deserialized in the main process. +// +// !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! + class SkPrivateEffectInitializer { public: static void Init() { -- cgit v1.2.3