[Webkit-unassigned] [Bug 219632] New: [macOS] On Big Sur WKWebView immediately crash inside a quicklook preview window (QLPreviewingController)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=219632

            Bug ID: 219632
           Summary: [macOS] On Big Sur WKWebView immediately crash inside
                    a quicklook preview window (QLPreviewingController)
           Product: WebKit
           Version: Safari 14
          Hardware: Macintosh
                OS: Other
            Status: NEW
          Severity: Critical
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: sbarex at gmail.com

I have a Quicklook appex that show the file contents by a WKWebView. The application and the extension are sandboxed. When try to use the quickllok preview I see only the spinning icon.
On XCode this is the log:

[Process] 0x7f8cbc029620 - [pageProxyID=5, webPageID=6, PID=0] WebPageProxy::processDidTerminate: (pid 0), reason 3
[Loading] 0x7f8cbc029620 - [pageProxyID=5, webPageID=6, PID=0] WebPageProxy::dispatchProcessDidTerminate: reason = 3
[Process] 0x7f8cbc029620 - [pageProxyID=5, webPageID=6, PID=0] WebPageProxy::tryReloadAfterProcessTermination: process crashed and the client did not handle it, not reloading the page because we reached the maximum number of attempts

Using the webkit source code I see this other output log:
com.apple.WebKit.Networking.Development[96084:1414561] Application does not have permission to communicate with network resources. rc=1 : errno=22

Che entitlements check fail on `XPCServiceInitializerDelegate::checkEntitlements` in XPCServiceEntryPoint.mm. If I hack this function returning true the preview works well.
I see that the function was changed on revision 261238 of the 2020-05-06 19:32. From this revision the `checkEntitlements` uses the SandboxSPI to check the entitlements with `sandbox_check_by_audit_token`. Before it uses `hasEntitlement` (that uses `SecTaskCopyValueForEntitlement` to perform the check).

Both the application and the extension contain the entitlement `com.apple.security.network.client`.

Please note that the application works on Catalina. 
If I use the deprecated WebView insted of WKWebView the preview works also on Big Sur.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201208/14f9a6ff/attachment.htm>