Gtk-Message: 22:05:36.902: Failed to load module "canberra-gtk-module" Gtk-Message: 22:05:36.905: Failed to load module "canberra-gtk-module" [2979:2979:0404/220536.990044:WARNING:components/os_crypt/sync/key_storage_linux.cc:166] OSCrypt tried Libsecret but couldn't initialise. [2979:2979:0404/220537.111264:WARNING:chrome/browser/signin/account_consistency_mode_manager.cc:74] Desktop Identity Consistency cannot be enabled as no OAuth client ID and client secret have been configured. [3011:3011:0404/220537.407984:ERROR:gpu/vulkan/vulkan_instance.cc:200] vkCreateInstance() failed: -9 [3011:3011:0404/220537.421906:WARNING:sandbox/policy/linux/sandbox_linux.cc:404] InitializeSandbox() called with multiple threads in process gpu-process. [3011:3011:0404/220537.445983:WARNING:ui/gfx/linux/gbm_support_x11.cc:48] dri3 extension not supported. LaunchProcess: failed to execvp: xdg-desktop-menu LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource LaunchProcess: failed to execvp: xdg-icon-resource [2979:3002:0404/220538.167169:WARNING:chrome/browser/web_applications/os_integration/web_app_shortcut_linux.cc:186] Could not install icon chrome-hcclnajddgnomimddgjcbalnkakaoelh-Default.png at size 512. LaunchProcess: failed to execvp: xdg-desktop-menu [2979:2979:0404/220538.442620:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. [2979:2991:0404/220538.708347:WARNING:apps/launcher.cc:181] Cannot make absolute path from http://localhost:44665/register_sw.html [2979:2979:0404/220538.815303:INFO:CONSOLE:11] "SW registered, waiting for activation...", source: http://localhost:44665/register_sw.html (11) [2979:2979:0404/220538.842149:INFO:CONSOLE:11] "SW active. Default-partition SW is now controlling /victim.html", source: http://localhost:44665/register_sw.html (11) [2979:2979:0404/220539.361121:INFO:CONSOLE:10] "[attacker] guest-partition page loaded", source: http://localhost:44665/attacker.html (10) [2979:2979:0404/220539.362391:INFO:CONSOLE:10] "[attacker] navigator.serviceWorker.controller = none (expected: none — guest partition has no SW registered)", source: http://localhost:44665/attacker.html (10) [2979:2979:0404/220539.363421:INFO:CONSOLE:4] "[guest] [attacker] guest-partition page loaded", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (4) [2979:2979:0404/220539.363987:INFO:CONSOLE:4] "[guest] [attacker] navigator.serviceWorker.controller = none (expected: none — guest partition has no SW registered)", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (4) [2979:2979:0404/220539.410480:INFO:CONSOLE:7] "[app] webview loadstop: http://localhost:44665/attacker.html", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (7) [2979:2979:0404/220543.366447:INFO:CONSOLE:10] "[attacker] speculation-rules prefetch for /victim.html injected", source: http://localhost:44665/attacker.html (10) [2979:2979:0404/220543.372934:ERROR:content/browser/preloading/prefetch/prefetch_streaming_url_loader.cc:383] [POC] PrefetchStreamingURLLoader: SW interceptor for prefetch url=http://localhost:44665/victim.html using DEFAULT partition sw_context=0x7c1c3e785800 [2979:2979:0404/220543.374925:INFO:CONSOLE:4] "[guest] [attacker] speculation-rules prefetch for /victim.html injected", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (4) [2979:2979:0404/220547.364949:INFO:CONSOLE:10] "[attacker] navigating guest webview to /victim.html", source: http://localhost:44665/attacker.html (10) [2979:2979:0404/220547.367316:INFO:CONSOLE:4] "[guest] [attacker] navigating guest webview to /victim.html", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (4) [2979:2979:0404/220547.379611:ERROR:content/browser/service_worker/service_worker_main_resource_handle.cc:122] [POC] InitializeForRequest url=http://localhost:44665/victim.html key={ origin: http://localhost:44665, top-level site: http://localhost, nonce: , ancestor chain bit: Same-Site } nav_partition=0x7ccc3e6fd080 nav_sw_context=0x7c8c3e81c480 prefetch_sw_context=0x7c8c3e642080 [2979:2979:0404/220547.379731:ERROR:content/browser/service_worker/service_worker_main_resource_handle.cc:129] [POC] *** CROSS-PARTITION SERVICEWORKER CONTROLLER ADOPTION *** [2979:2979:0404/220547.379765:ERROR:content/browser/service_worker/service_worker_main_resource_handle.cc:131] [POC] The prefetch's ServiceWorkerClient belongs to a different ServiceWorkerContextCore (i.e. a different StoragePartition) than the navigation handle. About to install a default-partition ServiceWorkerRegistration as the controller of a non-default-partition client. #0 0x55bd861929f6 in ___interceptor_backtrace ??:0:0 #1 0x55bd9e3a7108 in base::debug::CollectStackTrace(base::span) ./../../base/debug/stack_trace_posix.cc:1050:7 #2 0x55bd9e364997 in base::debug::StackTrace::StackTrace() ./../../base/debug/stack_trace.cc:280:20 #3 0x55bd936c1605 in content::ServiceWorkerMainResourceHandle::InitializeForRequest(GURL const&, std::__Cr::optional, content::ServiceWorkerClient const*) ./../../content/browser/service_worker/service_worker_main_resource_handle.cc:137:7 #4 0x55bd92c59e9e in content::PrefetchURLLoaderInterceptor::OnGetPrefetchComplete(GURL const&, std::__Cr::optional const&, content::PrefetchServingHandle) ./../../content/browser/preloading/prefetch/prefetch_url_loader_interceptor.cc:259:56 #5 0x55bd92c5bab3 in void base::internal::Invoker const&, content::PrefetchServingHandle), base::WeakPtr&&, GURL&&, std::__Cr::optional&&>, base::internal::BindState const&, content::PrefetchServingHandle), base::WeakPtr, GURL, std::__Cr::optional>, void (content::PrefetchServingHandle)>::RunImpl const&, content::PrefetchServingHandle), std::__Cr::tuple, GURL, std::__Cr::optional>, 0ul, 1ul, 2ul>(void (content::PrefetchURLLoaderInterceptor::*&&)(GURL const&, std::__Cr::optional const&, content::PrefetchServingHandle), std::__Cr::tuple, GURL, std::__Cr::optional>&&, std::__Cr::integer_sequence, content::PrefetchServingHandle&&) ./../../base/functional/bind_internal.h:740:12 #6 0x55bd92c440d2 in content::PrefetchServingHandle::ContinueOnGotPrefetchToServe(std::__Cr::unique_ptr>) && ./../../base/functional/callback.h:155:12 #7 0x55bd92c467ca in content::PrefetchServingHandle::OnGotPrefetchToServe(base::IdType, GURL const&, base::OnceCallback) && ./../../content/browser/preloading/prefetch/prefetch_serving_handle.cc:555:20 #8 0x55bd92c5b1ef in content::(anonymous namespace)::OnGotPrefetchToServe(base::IdType, GURL const&, base::OnceCallback, content::PrefetchServingHandle) ./../../content/browser/preloading/prefetch/prefetch_url_loader_interceptor.cc:57:8 #9 0x55bd92c5bfdd in base::internal::Invoker, GURL const&, base::OnceCallback, content::PrefetchServingHandle), base::IdType&&, GURL&&, base::OnceCallback&&>, base::internal::BindState, GURL const&, base::OnceCallback, content::PrefetchServingHandle), base::IdType, GURL, base::OnceCallback>, void (content::PrefetchServingHandle)>::RunOnce(base::internal::BindStateBase*, content::PrefetchServingHandle&&) ./../../base/functional/bind_internal.h:673:12 #10 0x55bd92bd265d in content::PrefetchMatchResolver::UnblockInternal(content::PrefetchServingHandle) ./../../base/functional/callback.h:155:12 #11 0x55bd92bcdc1f in content::PrefetchMatchResolver::UnblockForMatch(content::PrefetchKey const&) ./../../content/browser/preloading/prefetch/prefetch_match_resolver.cc:761:3 #12 0x55bd92bcbcbd in content::PrefetchMatchResolver::FindPrefetchInternal2(content::PrefetchService&, base::WeakPtr) ./../../content/browser/preloading/prefetch/prefetch_match_resolver.cc:376:9 #13 0x55bd92bcaef7 in content::PrefetchMatchResolver::FindPrefetchInternal1(base::WeakPtr, content::PrefetchService&, content::PrefetchKey, content::PrefetchServiceWorkerState, bool, base::WeakPtr, base::IdType, scoped_refptr, base::WeakPtr, base::OnceCallback, perfetto::internal::FlowImpl) ./../../content/browser/preloading/prefetch/prefetch_match_resolver.cc:218:7 #14 0x55bd92bca578 in content::PrefetchMatchResolver::FindPrefetch(base::IdType, content::PrefetchService&, content::PrefetchKey, content::PrefetchServiceWorkerState, base::WeakPtr, base::OnceCallback, perfetto::internal::FlowImpl) ./../../content/browser/preloading/prefetch/prefetch_match_resolver.cc:160:3 #15 0x55bd92c5ac61 in content::PrefetchURLLoaderInterceptor::GetPrefetch(GURL const&, base::OnceCallback) const ./../../content/browser/preloading/prefetch/prefetch_url_loader_interceptor.cc:227:3 #16 0x55bd92c57d6b in content::PrefetchURLLoaderInterceptor::MaybeCreateLoader(network::ResourceRequest const&, content::BrowserContext*, base::OnceCallback)>, base::OnceCallback) ./../../content/browser/preloading/prefetch/prefetch_url_loader_interceptor.cc:190:3 #17 0x55bd928a658f in content::NavigationURLLoaderImpl::MaybeStartLoader(unsigned long, std::__Cr::optional) ./../../content/browser/loader/navigation_url_loader_impl.cc:889:21 #18 0x55bd928a526e in content::NavigationURLLoaderImpl::Restart() ./../../content/browser/loader/navigation_url_loader_impl.cc:843:3 #19 0x55bd928a21c5 in content::NavigationURLLoaderImpl::Start() ./../../content/browser/loader/navigation_url_loader_impl.cc:733:3 #20 0x55bd9311b237 in content::NavigationRequest::OnStartChecksComplete(content::NavigationThrottle::ThrottleCheckResult) ./../../content/browser/renderer_host/navigation_request.cc:5866:12 #21 0x55bd93137da5 in content::NavigationRequest::OnWillStartRequestProcessed(content::NavigationThrottle::ThrottleCheckResult) ./../../content/browser/renderer_host/navigation_request.cc:8269:3 #22 0x55bd9313795a in content::NavigationRequest::OnNavigationEventProcessed(content::NavigationThrottleEvent, content::NavigationThrottle::ThrottleCheckResult) ./../../content/browser/renderer_host/navigation_request.cc:8230:7 #23 0x55bd9318c0a3 in content::NavigationThrottleRegistryImpl::OnEventProcessed(content::NavigationThrottleEvent, content::NavigationThrottle::ThrottleCheckResult) ./../../content/browser/renderer_host/navigation_throttle_registry_impl.cc:321:24 #24 0x55bd93191ead in content::NavigationThrottleRunner::InformRegistry(content::NavigationThrottle::ThrottleCheckResult const&) ./../../content/browser/renderer_host/navigation_throttle_runner.cc:249:14 #25 0x55bd93190a61 in content::NavigationThrottleRunner::ProcessInternal() ./../../content/browser/renderer_host/navigation_throttle_runner.cc:238:3 #26 0x55bd9318ec28 in content::NavigationThrottleRunner::ProcessNavigationEvent(content::NavigationThrottleEvent) ./../../content/browser/renderer_host/navigation_throttle_runner.cc:131:3 #27 0x55bd93189c16 in content::NavigationThrottleRegistryImpl::ProcessNavigationEvent(content::NavigationThrottleEvent) ./../../content/browser/renderer_host/navigation_throttle_registry_impl.cc:219:32 #28 0x55bd930fcb07 in content::NavigationRequest::WillStartRequest() ./../../content/browser/renderer_host/navigation_request.cc:8543:23 #29 0x55bd930f39dd in content::NavigationRequest::BeginNavigationImpl() ./../../content/browser/renderer_host/navigation_request.cc:3096:3 #30 0x55bd930ef926 in content::NavigationRequest::BeginNavigation() ./../../content/browser/renderer_host/navigation_request.cc:2602:3 #31 0x55bd9319f994 in content::Navigator::OnBeginNavigation(content::FrameTreeNode*, mojo::StructPtr, mojo::StructPtr, scoped_refptr, mojo::PendingAssociatedRemote, scoped_refptr, int, mojo::PendingReceiver, mojo::PendingReceiver) ./../../content/browser/renderer_host/navigator.cc:1410:23 #32 0x55bd9325cd53 in content::RenderFrameHostImpl::BeginNavigation(mojo::StructPtr, mojo::StructPtr, mojo::PendingRemote, mojo::PendingAssociatedRemote, mojo::PendingRemote, mojo::PendingReceiver, mojo::PendingReceiver) ./../../content/browser/renderer_host/render_frame_host_impl.cc:11631:33 #33 0x55bd8bd29dd0 in content::mojom::FrameHostStubDispatch::Accept(content::mojom::FrameHost*, mojo::Message*) ./gen/content/common/frame.mojom.cc:5847:13 #34 0x55bd9df9a6da in mojo::InterfaceEndpointClient::HandleValidatedMessage(mojo::Message*) ./../../mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:1085:54 #35 0x55bd9dfb8464 in mojo::MessageDispatcher::Accept(mojo::Message*) ./../../mojo/public/cpp/bindings/lib/message_dispatcher.cc:51:24 #36 0x55bd9dfa0b84 in mojo::InterfaceEndpointClient::HandleIncomingMessage(mojo::Message*) ./../../mojo/public/cpp/bindings/lib/interface_endpoint_client.cc:747:20 #37 0x55bda1ec0e3e in IPC::ChannelAssociatedGroupController::AcceptOnEndpointThread(mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification) ./../../ipc/ipc_mojo_bootstrap.cc:1199:24 #38 0x55bda1ec32c6 in base::internal::Invoker, base::internal::BindState, mojo::Message, IPC::(anonymous namespace)::ScopedUrgentMessageNotification>, void ()>::RunOnce(base::internal::BindStateBase*) ./../../base/functional/bind_internal.h:740:12 #39 0x55bd9e1da997 in base::TaskAnnotator::RunTaskImpl(base::PendingTask&) ./../../base/functional/callback.h:155:12 #40 0x55bd9e25203a in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow*) ./../../base/task/common/task_annotator.h:112:5 #41 0x55bd9e250eab in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:340:40 #42 0x55bd9e400395 in base::MessagePumpGlib::Run(base::MessagePump::Delegate*) ./../../base/message_loop/message_pump_glib.cc:782:48 #43 0x55bd9e253748 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) ./../../base/task/sequence_manager/thread_controller_with_message_pump_impl.cc:644:12 #44 0x55bd9e155311 in base::RunLoop::Run(base::Location const&) ./../../base/run_loop.cc:135:14 #45 0x55bd91c5688d in content::BrowserMainLoop::RunMainMessageLoop() ./../../content/browser/browser_main_loop.cc:1105:18 #46 0x55bd91c5ef3d in content::BrowserMainRunnerImpl::Run() ./../../content/browser/browser_main_runner_impl.cc:151:15 #47 0x55bd91c4d5bd in content::BrowserMain(content::MainFunctionParams) ./../../content/browser/browser_main.cc:32:28 #48 0x55bd99cf3950 in content::RunBrowserProcessMain(content::MainFunctionParams, content::ContentMainDelegate*) ./../../content/app/content_main_runner_impl.cc:696:10 #49 0x55bd99cf7939 in content::ContentMainRunnerImpl::RunBrowser(content::MainFunctionParams, bool) ./../../content/app/content_main_runner_impl.cc:1320:10 #50 0x55bd99cf6dcb in content::ContentMainRunnerImpl::Run() ./../../content/app/content_main_runner_impl.cc:1150:12 #51 0x55bd99cf0772 in content::RunContentProcess(content::ContentMainParams, content::ContentMainRunner*) ./../../content/app/content_main.cc:358:36 #52 0x55bd99cf0d6d in content::ContentMain(content::ContentMainParams) ./../../content/app/content_main.cc:371:10 #53 0x55bd86225b3a in ChromeMain ./../../chrome/app/chrome_main.cc:191:12 #54 0x7f0c4042b24a in __libc_init_first ??:? #55 0x7f0c4042b305 in __libc_start_main ??:0:0 #56 0x55bd8614b02a in _start ??:0:0 [2979:2979:0404/220547.466124:INFO:CONSOLE:1] "[victim] body source = DEFAULT-PARTITION SERVICEWORKER; controller=http://localhost:44665/sw.js", source: http://localhost:44665/victim.html (1) [2979:2979:0404/220547.469299:INFO:CONSOLE:4] "[guest] [victim] body source = DEFAULT-PARTITION SERVICEWORKER; controller=http://localhost:44665/sw.js", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (4) [2979:2979:0404/220547.472891:INFO:CONSOLE:7] "[app] webview loadstop: http://localhost:44665/victim.html", source: chrome-extension://hcclnajddgnomimddgjcbalnkakaoelh/window.js (7)