From 7d5f515019fe58a79cb435452a36c4a618e4c70b Mon Sep 17 00:00:00 2001 From: Carmelo Messina Date: Wed, 26 Nov 2025 18:01:45 +0100 Subject: [PATCH] Enable ProcessBoundStringEncryption by default: drop patch, feature enabled by default from upstream --- build/cromite_patches_list.txt | 1 - ...cessBoundStringEncryption-by-default.patch | 25 ------------------- 2 files changed, 26 deletions(-) delete mode 100644 build/patches/Enable-ProcessBoundStringEncryption-by-default.patch diff --git a/build/cromite_patches_list.txt b/build/cromite_patches_list.txt index 509d1519..d7602cf3 100644 --- a/build/cromite_patches_list.txt +++ b/build/cromite_patches_list.txt @@ -287,7 +287,6 @@ Disable-Posture-API.patch PublicKeyCredential-fingerprinting-mitigations.patch Disable-Web-Bluetooth-by-default-in-desktop-platforms.patch Enable-Cert-Management-UI.patch -Enable-ProcessBoundStringEncryption-by-default.patch Prevent-mouse-wheel-fingerprinting-on-Windows.patch Enable-component-updater.patch Android-fonts-fingerprinting-mitigation.patch diff --git a/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch b/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch deleted file mode 100644 index 10c0d5c6..00000000 --- a/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch +++ /dev/null @@ -1,25 +0,0 @@ -From: uazo -Date: Mon, 20 Jan 2025 16:55:57 +0000 -Subject: Enable ProcessBoundStringEncryption by default - -Data placed into a crypto::ProcessBoundString no longer appears in crash dumps -or memory dumps so should be used for any sensitive data that should be process-bound. -https://issuetracker.google.com/issues/372873695 - -License: GPL-2.0-or-later - https://spdx.org/licenses/GPL-2.0-or-later.html ---- - crypto/features.cc | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/crypto/features.cc b/crypto/features.cc ---- a/crypto/features.cc -+++ b/crypto/features.cc -@@ -13,4 +13,7 @@ BASE_FEATURE(kIsHardwareBackedFixEnabled, base::FEATURE_ENABLED_BY_DEFAULT); - BASE_FEATURE(kMigrateIOSKeychainAccessibility, - base::FEATURE_DISABLED_BY_DEFAULT); - -+#if BUILDFLAG(IS_WIN) -+SET_CROMITE_FEATURE_ENABLED(kProcessBoundStringEncryption); -+#endif - } // namespace crypto::features ---