ffxbld
a78cf21c03
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update a=dmeehan
...
Differential Revision: https://phabricator.services.mozilla.com/D139273
2022-02-22 15:05:34 +00:00
Jens Stutte
8dc1e5affa
Bug 1750635: Substitute AppShutdown:IsShuttingDown with equivalent AppShutdown::IsInOrBeyond. r=florian,xpcom-reviewers,nika
...
Differential Revision: https://phabricator.services.mozilla.com/D139143
2022-02-18 19:35:13 +00:00
Tom Ritter
cfbe02ff6e
Bug 1750859: If not all decoders are remoted, you're disqualified from win32k r=bobowen
...
Differential Revision: https://phabricator.services.mozilla.com/D139043
2022-02-17 18:59:17 +00:00
Sergey Galich
2924bdb35f
Bug 1653486 - Replace all non-user-facing references to "master" password. r=dimi,tgiles,preferences-reviewers
...
Differential Revision: https://phabricator.services.mozilla.com/D138113
2022-02-17 17:29:57 +00:00
ffxbld
fd59e8d9be
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update a=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D139007
2022-02-17 13:37:52 +00:00
Dana Keeler
f05d29b7f8
Bug 1754217 - remove brittle time format APIs from nsIX509CertValidity r=jschanck
...
nsIX509CertValidity had a handful of APIs that would return formatted time
values. Some of these APIs were unused, and the rest were prone to error due to
platform differences. This patch simplifies this interface by removing those
APIs and having callers perform their own formatting using the remaining APIs
that return PRTime values.
Differential Revision: https://phabricator.services.mozilla.com/D138363
2022-02-15 22:55:02 +00:00
Dennis Jackson
ac3025042a
Bug 1753980 - land NSS 4a8880ef UPGRADE_NSS_RELEASE, r=bbeurdouche
...
```
2022-02-14 Martin Thomson <mt@lowentropy.net>
* gtests/common/testvectors/rsa_pss_2048_sha1_mgf1_20-vectors.h,
gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_0-vectors.h,
gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_32-vectors.h,
gtests/common/testvectors/rsa_pss_3072_sha256_mgf1_32-vectors.h,
gtests/common/testvectors/rsa_pss_4096_sha256_mgf1_32-vectors.h,
gtests/common/testvectors/rsa_pss_4096_sha512_mgf1_32-vectors.h,
gtests/common/testvectors/rsa_pss_misc-vectors.h,
gtests/common/wycheproof/genTestVectors.py, gtests/common/wycheproof
/source_vectors/rsa_pss_2048_sha1_mgf1_20_test.json, gtests/common/w
ycheproof/source_vectors/rsa_pss_2048_sha256_mgf1_0_test.json, gtest
s/common/wycheproof/source_vectors/rsa_pss_2048_sha256_mgf1_32_test.
json, gtests/common/wycheproof/source_vectors/rsa_pss_3072_sha256_mg
f1_32_test.json, gtests/common/wycheproof/source_vectors/rsa_pss_409
6_sha256_mgf1_32_test.json, gtests/common/wycheproof/source_vectors/
rsa_pss_4096_sha512_mgf1_32_test.json,
gtests/common/wycheproof/source_vectors/rsa_pss_misc_test.json,
gtests/pk11_gtest/json.h, gtests/pk11_gtest/pk11_hpke_unittest.cc,
gtests/pk11_gtest/pk11_rsapss_unittest.cc:
Bug 1747957 - Use Wycheproof JSON for RSASSA-PSS, r=nss-
reviewers,bbeurdouche
[4a8880ef1adc] [tip]
2022-02-10 Leander Schwarz <lschwarz@mozilla.com>
* gtests/ssl_gtest/ssl_extension_unittest.cc,
gtests/ssl_gtest/tls_ech_unittest.cc, lib/ssl/ssl3ext.c:
Bug 1751157 - Throw illegal_parameter alert for illegal extensions
in handshake message. r=djackson
[8fd5ca0cf897]
2022-02-09 John M. Schanck <jschanck@mozilla.com>
* automation/release/nss-release-helper.py:
Bug 1753505 - Avoid truncating files in nss-release-helper.py.
r=bbeurdouche
[7876a7255030]
2022-02-08 John M. Schanck <jschanck@mozilla.com>
* lib/ckfw/builtins/certdata.txt:
Bug 1679803 - Add SHA256 fingerprint comments to old certdata.txt
entries. r=nss-reviewers,bbeurdouche
The new SHA256 hashes were calculated using the script below, which
reads certificates out of the builtin token and re-processing them
with the current version of addbuiltin. One of the "Autoridad de
Certificacion Firmaprofesional CIF A62634068" certificates had to be
handled manually because of Bug 456858.
``` #!/bin/bash
NSS_LIB=<path to dist/Debug/lib>
WORK=/tmp/nssdb/ LIST=${WORK}/list.txt OUT=${WORK}/certdata.txt
rm -rf ${WORK} mkdir -p ${WORK} modutil -force -dbdir "sql:${WORK}"
-create modutil -force -dbdir "sql:${WORK}" -add "nssckbi" -libfile
"${NSS_LIB}/libnssckbi.so"
certutil -d "sql:${WORK}" -L -h "Builtin Object Token" | grep
Builtin > ${LIST} sed -i 's/\s*\(C\?,C\?,C\?\)\s*$/;\1/' ${LIST}
while IFS=";" read -r name trust do certutil -d "sql:${WORK}" -L -n
"${name}" -r 1> "${WORK}/${name}.der" addbuiltin -t "${trust}" -n
"${name/Builtin Object Token:/}" -i "${WORK}/${name}.der" done <
${LIST} >> ${OUT} ```
[7a34cf74b659]
```
Differential Revision: https://phabricator.services.mozilla.com/D138799
2022-02-15 18:04:14 +00:00
Haik Aftandilian
e1863039f6
Bug 1707739 - Re-enable browser_content_sandbox_fs.js r=spohl
...
Change browser_content_sandbox_fs.js to not assume the font registry directory or the 'font' file have been created by the system. If the directory and or file are not present, skip the readability test instead of failing.
Differential Revision: https://phabricator.services.mozilla.com/D138622
2022-02-15 16:13:55 +00:00
John Schanck
2654fbb629
Bug 1753071 - Add a "confirm revocations" mode to CRLite. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D137553
2022-02-14 18:55:21 +00:00
ffxbld
79d6ccf336
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D138643
2022-02-14 17:57:46 +00:00
Bob Owen
dbc9c90549
Bug 1754940: Make alternate winstation depend on non-native theme. r=handyman
...
Differential Revision: https://phabricator.services.mozilla.com/D138527
2022-02-11 18:18:15 +00:00
Florian Quèze
7b45ca4063
Bug 1754519 - Add missing profiler_thread_sleep annotations, r=gerald,necko-reviewers,kershaw.
...
Differential Revision: https://phabricator.services.mozilla.com/D138341
2022-02-11 15:19:46 +00:00
Bob Owen
e82a8ce887
Bug 1695556 p3: Add file tests for content process sandbox. r=handyman,ipc-reviewers,jld
...
Depends on D135693
Differential Revision: https://phabricator.services.mozilla.com/D135694
2022-02-10 16:56:02 +00:00
Bob Owen
36c9b7f8da
Bug 1695556 p1a: Add allow reparse points in chromium sandbox code patch. r=handyman
...
Differential Revision: https://phabricator.services.mozilla.com/D137858
2022-02-10 16:56:01 +00:00
Bob Owen
9b1cd0242d
Bug 1695556 p1: Allow reparse points in chromium sandbox code. r=handyman
...
Differential Revision: https://phabricator.services.mozilla.com/D135692
2022-02-10 16:56:01 +00:00
ffxbld
2420fb4c51
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D138425
2022-02-10 13:42:48 +00:00
Kershaw Chang
ef25b1a6f3
Bug 1734470 - Add MITIGATION_DYNAMIC_CODE_DISABLE back to socket process sandboxing, r=bobowen,necko-reviewers,valentin
...
Differential Revision: https://phabricator.services.mozilla.com/D138204
2022-02-10 09:09:59 +00:00
Dana Keeler
437958626e
Bug 1754294 - remove some unused files in PSM that should have been removed in bug 1751078 r=jschanck
...
Depends on D138215
Differential Revision: https://phabricator.services.mozilla.com/D138224
2022-02-09 21:13:24 +00:00
Dana Keeler
9731d7145f
Bug 1754294 - take the appropriate lock when accessing SECMODModule slot information r=jschanck
...
When accessing a SECMODModule's slots or slotCount members, the read lock of
the module list must be acquired.
Differential Revision: https://phabricator.services.mozilla.com/D138215
2022-02-09 21:13:24 +00:00
Nika Layzell
dabb46c84d
Bug 1736371 - Default new actors to be refcounted, r=alwu,media-playback-reviewers,mccr8
...
The changes to ipdl actors were mechanical, and largely automated using
a script.
Differential Revision: https://phabricator.services.mozilla.com/D137237
2022-02-09 17:29:47 +00:00
Alexandre Lissy
d9b9db2be0
Bug 1750539 - Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp
...
Differential Revision: https://phabricator.services.mozilla.com/D137706
2022-02-08 12:48:28 +00:00
Alexandre Lissy
17ea511a02
Bug 1750539 - Sandbox with SNAP= needs pre-existing directory r=gcp
...
Differential Revision: https://phabricator.services.mozilla.com/D137457
2022-02-08 12:48:28 +00:00
criss
43bb571ab5
Backed out 3 changesets (bug 1741215, bug 1750539) for causing mochitest failures. CLOSED TREE
...
Backed out changeset 4caa5563e76d (bug 1741215)
Backed out changeset 59a79a27eb78 (bug 1750539)
Backed out changeset 0433ecd3427d (bug 1750539)
2022-02-08 16:15:11 +02:00
Alexandre Lissy
89974dccdc
Bug 1750539 - Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp
...
Differential Revision: https://phabricator.services.mozilla.com/D137706
2022-02-08 12:48:28 +00:00
Alexandre Lissy
8034c83917
Bug 1750539 - Sandbox with SNAP= needs pre-existing directory r=gcp
...
Differential Revision: https://phabricator.services.mozilla.com/D137457
2022-02-08 12:48:28 +00:00
John Schanck
3fa9218df2
Bug 1747959 - Take module list lock in FindRootsWithSubject. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D138061
2022-02-07 21:39:20 +00:00
Benjamin Beurdouche
bf3cd48302
Bug 1753980 - land NSS ac0c37493099 UPGRADE_NSS_RELEASE, r=nkulatova
...
Differential Revision: https://phabricator.services.mozilla.com/D138023
2022-02-07 16:31:57 +00:00
ffxbld
cca27e2e77
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D137993
2022-02-07 14:00:06 +00:00
ffxbld
8eeb283be2
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D137731
2022-02-04 19:26:02 +00:00
John M. Schanck
072f8043fa
Bug 1748820 - land NSS NSS_3_75_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
...
```
2022-02-03 John M. Schanck <jschanck@mozilla.com>
* doc/rst/releases/index.rst:
Release notes for NSS 3.75
[27194d9a9ebd] [NSS_3_75_RTM] <NSS_3_75_BRANCH>
2022-02-03 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
Set version numbers to 3.75 final
[151f1680d540] <NSS_3_75_BRANCH>
```
Differential Revision: https://phabricator.services.mozilla.com/D137783
2022-02-03 19:29:01 +00:00
Sylvestre Ledru
16b9c75459
Bug 1753127 - NSPR doc: move the doc into docs/nspr UPGRADE_NSS_RELEASE r=kaie,bbeurdouche
...
Depends on D137611
Differential Revision: https://phabricator.services.mozilla.com/D137612
2022-02-02 17:19:51 +00:00
Sylvestre Ledru
a4e5da4d89
Bug 1753127 - NSPR doc: Add some missing content back UPGRADE_NSS_RELEASE r=kaie,bbeurdouche
...
Depends on D137607
Differential Revision: https://phabricator.services.mozilla.com/D137611
2022-02-02 17:19:50 +00:00
Sylvestre Ledru
b30245fd89
Bug 1753127 - NSPR doc: fix some links in the various part of the doc UPGRADE_NSS_RELEASE r=bbeurdouche
...
Depends on D137590
Differential Revision: https://phabricator.services.mozilla.com/D137607
2022-02-02 17:19:50 +00:00
Sylvestre Ledru
2d8ab6f7be
Bug 1753127 - NSPR doc: fix many different issues UPGRADE_NSS_RELEASE r=bbeurdouche
...
Depends on D137589
Differential Revision: https://phabricator.services.mozilla.com/D137590
2022-02-02 17:19:49 +00:00
Sylvestre Ledru
ecac0317d5
Bug 1753127 - NSPR doc: Remove some old docs UPGRADE_NSS_RELEASE r=bbeurdouche
...
Depends on D137588
Differential Revision: https://phabricator.services.mozilla.com/D137589
2022-02-02 17:19:49 +00:00
Sylvestre Ledru
1666595fdb
Bug 1753127 - NSPR doc: initial import UPGRADE_NSS_RELEASE r=bbeurdouche
...
Differential Revision: https://phabricator.services.mozilla.com/D137588
2022-02-02 17:07:53 +00:00
Tom Ritter
d59df896db
Bug 1751494 - Move win32k logic from sandbox to apprunner r=bobowen
...
Differential Revision: https://phabricator.services.mozilla.com/D137324
2022-02-02 16:33:11 +00:00
Tom Ritter
6013bc9b5a
Bug 1751494 - Add additional checks/returns to GetContentWin32kLockdownState r=bobowen
...
Differential Revision: https://phabricator.services.mozilla.com/D136802
2022-02-02 16:33:10 +00:00
Tom Ritter
77751c55be
Bug 1751494 - Add new enum values to ContentWin32kLockdownState r=bobowen
...
Differential Revision: https://phabricator.services.mozilla.com/D136801
2022-02-02 16:33:10 +00:00
Bob Owen
48e1837edd
Bug 1751367: Delay loading winmm.dll, so it loads after COM initialization. r=cmartin,media-playback-reviewers,alwu
...
This is to prevent user32.dll from loading before COM initialization on earlier
version of windows.
Differential Revision: https://phabricator.services.mozilla.com/D136936
2022-02-02 13:43:51 +00:00
Bob Owen
961ed234d4
Bug 1151941: Use an alternate winstation for the content process sandbox. r=cmartin
...
Differential Revision: https://phabricator.services.mozilla.com/D136935
2022-02-02 13:43:51 +00:00
Marian-Vasile Laza
944f53b58d
Backed out 2 changesets (bug 1751367, bug 1151941) for causing marionette test failures. CLOSED TREE
...
Backed out changeset 0b12f1bb498a (bug 1751367)
Backed out changeset bba7c74dafae (bug 1151941)
2022-02-01 19:47:30 +02:00
Bob Owen
b9d6b5e60a
Bug 1751367: Delay loading winmm.dll, so it loads after COM initialization. r=cmartin,media-playback-reviewers,alwu
...
This is to prevent user32.dll from loading before COM initialization on earlier
version of windows.
Differential Revision: https://phabricator.services.mozilla.com/D136936
2022-02-01 13:31:33 +00:00
Bob Owen
dd05abfc31
Bug 1151941: Use an alternate winstation for the content process sandbox. r=cmartin
...
Differential Revision: https://phabricator.services.mozilla.com/D136935
2022-02-01 13:31:33 +00:00
Masatoshi Kimura
66e773f594
Bug 1752683 - Stop passing 8.3 names to NSS for SQLite db paths. r=keeler,florian
...
We pass 8.3 names to NSS to avoid non-ASCII characters because NSS still
depends on the system code page (although this workaround is not effective on
East-Asian locales).
We don't have to use 8.3 names to NSS for SQLite db paths because SQLite
always use UTF-8 for file names.
Differential Revision: https://phabricator.services.mozilla.com/D137379
2022-01-31 19:43:36 +00:00
Andi-Bogdan Postelnicu
30631a4a9b
Bug 1519636 - Reformat recent changes to the Google coding style. r=sylvestre
...
Updated with clang-format version 13.0.0 (taskcluster-dIIauZE0TkuXy6_23BQhcw)
# ignore-this-changeset
Differential Revision: https://phabricator.services.mozilla.com/D137147
2022-01-31 17:00:21 +00:00
ffxbld
ebd97d7fe2
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D137436
2022-01-31 14:29:01 +00:00
Benjamin Beurdouche
32bed2a81f
Bug 1748820 - land NSS 54d55c10aad8 UPGRADE_NSS_RELEASE, r=beurdouche DONTBUILD
...
Differential Revision: https://phabricator.services.mozilla.com/D137391
2022-01-30 18:22:02 +00:00
Benjamin Beurdouche
9c5781dbc5
Bug 1748820 - land NSS NSS_3_75_BETA1 UPGRADE_NSS_RELEASE, r=jschanck
...
```
2022-01-28 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* doc/rst/releases/index.rst:
Documentation: update the NSS release page
[decce8ec4e72] [NSS_3_75_BETA1]
2022-01-19 Natalia Kulatova <nkulatova@mozilla.com>
* automation/taskcluster/docker-builds/Dockerfile,
automation/taskcluster/graph/src/extend.js:
Bug 1749030 - This patch adds gcc-9 and gcc-10 to the CI. r=nss-
reviewers,bbeurdouche
[581fe264710f]
2022-01-19 John M. Schanck <jschanck@mozilla.com>
* lib/mozpkix/tools/DottedOIDToCode.py:
Bug 1749794 - Make DottedOIDToCode.py compatible with python3.
r=nss-reviewers,bbeurdouche.
[b5eff08becbb]
* lib/ssl/sslcert.c:
Bug 1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing.
r=nss-reviewers,mt
[c98fc11fb685]
2022-01-13 Martin Thomson <mt@lowentropy.net>
* lib/softoken/pkcs11c.c:
Bug 1748386 - Remove redundant key type check, r=rrelyea
[f9708b22f2f6]
* automation/abi-check/expected-report-libssl3.so.txt:
Bug 1749869 - Update ABI expectations to match ECH changes,
r=bbeurdouche
Depends on D135808
[4b7cf8161421]
```
Differential Revision: https://phabricator.services.mozilla.com/D137309
2022-01-28 18:25:19 +00:00
Benjamin Beurdouche
777b562eb2
No bug - update the NSS release menu in firefox-source-docs with recent releases UPGRADE_NSS_RELEASE, r=sylvestre
...
Differential Revision: https://phabricator.services.mozilla.com/D137276
2022-01-28 11:00:15 +00:00