Граф коммитов

16366 Коммитов

Автор SHA1 Сообщение Дата
ffxbld a78cf21c03 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D139273
2022-02-22 15:05:34 +00:00
Jens Stutte 8dc1e5affa Bug 1750635: Substitute AppShutdown:IsShuttingDown with equivalent AppShutdown::IsInOrBeyond. r=florian,xpcom-reviewers,nika
Differential Revision: https://phabricator.services.mozilla.com/D139143
2022-02-18 19:35:13 +00:00
Tom Ritter cfbe02ff6e Bug 1750859: If not all decoders are remoted, you're disqualified from win32k r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D139043
2022-02-17 18:59:17 +00:00
Sergey Galich 2924bdb35f Bug 1653486 - Replace all non-user-facing references to "master" password. r=dimi,tgiles,preferences-reviewers
Differential Revision: https://phabricator.services.mozilla.com/D138113
2022-02-17 17:29:57 +00:00
ffxbld fd59e8d9be No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D139007
2022-02-17 13:37:52 +00:00
Dana Keeler f05d29b7f8 Bug 1754217 - remove brittle time format APIs from nsIX509CertValidity r=jschanck
nsIX509CertValidity had a handful of APIs that would return formatted time
values. Some of these APIs were unused, and the rest were prone to error due to
platform differences. This patch simplifies this interface by removing those
APIs and having callers perform their own formatting using the remaining APIs
that return PRTime values.

Differential Revision: https://phabricator.services.mozilla.com/D138363
2022-02-15 22:55:02 +00:00
Dennis Jackson ac3025042a Bug 1753980 - land NSS 4a8880ef UPGRADE_NSS_RELEASE, r=bbeurdouche
```
2022-02-14  Martin Thomson  <mt@lowentropy.net>

	* gtests/common/testvectors/rsa_pss_2048_sha1_mgf1_20-vectors.h,
	gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_0-vectors.h,
	gtests/common/testvectors/rsa_pss_2048_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_3072_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_4096_sha256_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_4096_sha512_mgf1_32-vectors.h,
	gtests/common/testvectors/rsa_pss_misc-vectors.h,
	gtests/common/wycheproof/genTestVectors.py, gtests/common/wycheproof
	/source_vectors/rsa_pss_2048_sha1_mgf1_20_test.json, gtests/common/w
	ycheproof/source_vectors/rsa_pss_2048_sha256_mgf1_0_test.json, gtest
	s/common/wycheproof/source_vectors/rsa_pss_2048_sha256_mgf1_32_test.
	json, gtests/common/wycheproof/source_vectors/rsa_pss_3072_sha256_mg
	f1_32_test.json, gtests/common/wycheproof/source_vectors/rsa_pss_409
	6_sha256_mgf1_32_test.json, gtests/common/wycheproof/source_vectors/
	rsa_pss_4096_sha512_mgf1_32_test.json,
	gtests/common/wycheproof/source_vectors/rsa_pss_misc_test.json,
	gtests/pk11_gtest/json.h, gtests/pk11_gtest/pk11_hpke_unittest.cc,
	gtests/pk11_gtest/pk11_rsapss_unittest.cc:
	Bug 1747957 - Use Wycheproof JSON for RSASSA-PSS, r=nss-
	reviewers,bbeurdouche

	[4a8880ef1adc] [tip]

2022-02-10  Leander Schwarz  <lschwarz@mozilla.com>

	* gtests/ssl_gtest/ssl_extension_unittest.cc,
	gtests/ssl_gtest/tls_ech_unittest.cc, lib/ssl/ssl3ext.c:
	Bug 1751157 - Throw illegal_parameter alert for illegal extensions
	in handshake message. r=djackson

	[8fd5ca0cf897]

2022-02-09  John M. Schanck  <jschanck@mozilla.com>

	* automation/release/nss-release-helper.py:
	Bug 1753505 - Avoid truncating files in nss-release-helper.py.
	r=bbeurdouche

	[7876a7255030]

2022-02-08  John M. Schanck  <jschanck@mozilla.com>

	* lib/ckfw/builtins/certdata.txt:
	Bug 1679803 - Add SHA256 fingerprint comments to old certdata.txt
	entries. r=nss-reviewers,bbeurdouche

	The new SHA256 hashes were calculated using the script below, which
	reads certificates out of the builtin token and re-processing them
	with the current version of addbuiltin. One of the "Autoridad de
	Certificacion Firmaprofesional CIF A62634068" certificates had to be
	handled manually because of Bug 456858.

	``` #!/bin/bash

	NSS_LIB=<path to dist/Debug/lib>

	WORK=/tmp/nssdb/ LIST=${WORK}/list.txt OUT=${WORK}/certdata.txt

	rm -rf ${WORK} mkdir -p ${WORK} modutil -force -dbdir "sql:${WORK}"
	-create modutil -force -dbdir "sql:${WORK}" -add "nssckbi" -libfile
	"${NSS_LIB}/libnssckbi.so"

	certutil -d "sql:${WORK}" -L -h "Builtin Object Token" | grep
	Builtin > ${LIST} sed -i 's/\s*\(C\?,C\?,C\?\)\s*$/;\1/' ${LIST}

	while IFS=";" read -r name trust do certutil -d "sql:${WORK}" -L -n
	"${name}" -r 1> "${WORK}/${name}.der" addbuiltin -t "${trust}" -n
	"${name/Builtin Object Token:/}" -i "${WORK}/${name}.der" done <
	${LIST} >> ${OUT} ```

	[7a34cf74b659]
```

Differential Revision: https://phabricator.services.mozilla.com/D138799
2022-02-15 18:04:14 +00:00
Haik Aftandilian e1863039f6 Bug 1707739 - Re-enable browser_content_sandbox_fs.js r=spohl
Change browser_content_sandbox_fs.js to not assume the font registry directory or the 'font' file have been created by the system. If the directory and or file are not present, skip the readability test instead of failing.

Differential Revision: https://phabricator.services.mozilla.com/D138622
2022-02-15 16:13:55 +00:00
John Schanck 2654fbb629 Bug 1753071 - Add a "confirm revocations" mode to CRLite. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D137553
2022-02-14 18:55:21 +00:00
ffxbld 79d6ccf336 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D138643
2022-02-14 17:57:46 +00:00
Bob Owen dbc9c90549 Bug 1754940: Make alternate winstation depend on non-native theme. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D138527
2022-02-11 18:18:15 +00:00
Florian Quèze 7b45ca4063 Bug 1754519 - Add missing profiler_thread_sleep annotations, r=gerald,necko-reviewers,kershaw.
Differential Revision: https://phabricator.services.mozilla.com/D138341
2022-02-11 15:19:46 +00:00
Bob Owen e82a8ce887 Bug 1695556 p3: Add file tests for content process sandbox. r=handyman,ipc-reviewers,jld
Depends on D135693

Differential Revision: https://phabricator.services.mozilla.com/D135694
2022-02-10 16:56:02 +00:00
Bob Owen 36c9b7f8da Bug 1695556 p1a: Add allow reparse points in chromium sandbox code patch. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D137858
2022-02-10 16:56:01 +00:00
Bob Owen 9b1cd0242d Bug 1695556 p1: Allow reparse points in chromium sandbox code. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D135692
2022-02-10 16:56:01 +00:00
ffxbld 2420fb4c51 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D138425
2022-02-10 13:42:48 +00:00
Kershaw Chang ef25b1a6f3 Bug 1734470 - Add MITIGATION_DYNAMIC_CODE_DISABLE back to socket process sandboxing, r=bobowen,necko-reviewers,valentin
Differential Revision: https://phabricator.services.mozilla.com/D138204
2022-02-10 09:09:59 +00:00
Dana Keeler 437958626e Bug 1754294 - remove some unused files in PSM that should have been removed in bug 1751078 r=jschanck
Depends on D138215

Differential Revision: https://phabricator.services.mozilla.com/D138224
2022-02-09 21:13:24 +00:00
Dana Keeler 9731d7145f Bug 1754294 - take the appropriate lock when accessing SECMODModule slot information r=jschanck
When accessing a SECMODModule's slots or slotCount members, the read lock of
the module list must be acquired.

Differential Revision: https://phabricator.services.mozilla.com/D138215
2022-02-09 21:13:24 +00:00
Nika Layzell dabb46c84d Bug 1736371 - Default new actors to be refcounted, r=alwu,media-playback-reviewers,mccr8
The changes to ipdl actors were mechanical, and largely automated using
a script.

Differential Revision: https://phabricator.services.mozilla.com/D137237
2022-02-09 17:29:47 +00:00
Alexandre Lissy d9b9db2be0 Bug 1750539 - Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D137706
2022-02-08 12:48:28 +00:00
Alexandre Lissy 17ea511a02 Bug 1750539 - Sandbox with SNAP= needs pre-existing directory r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D137457
2022-02-08 12:48:28 +00:00
criss 43bb571ab5 Backed out 3 changesets (bug 1741215, bug 1750539) for causing mochitest failures. CLOSED TREE
Backed out changeset 4caa5563e76d (bug 1741215)
Backed out changeset 59a79a27eb78 (bug 1750539)
Backed out changeset 0433ecd3427d (bug 1750539)
2022-02-08 16:15:11 +02:00
Alexandre Lissy 89974dccdc Bug 1750539 - Make XDG_CONFIG_HOME lifecycle handled by test harness r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D137706
2022-02-08 12:48:28 +00:00
Alexandre Lissy 8034c83917 Bug 1750539 - Sandbox with SNAP= needs pre-existing directory r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D137457
2022-02-08 12:48:28 +00:00
John Schanck 3fa9218df2 Bug 1747959 - Take module list lock in FindRootsWithSubject. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D138061
2022-02-07 21:39:20 +00:00
Benjamin Beurdouche bf3cd48302 Bug 1753980 - land NSS ac0c37493099 UPGRADE_NSS_RELEASE, r=nkulatova
Differential Revision: https://phabricator.services.mozilla.com/D138023
2022-02-07 16:31:57 +00:00
ffxbld cca27e2e77 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D137993
2022-02-07 14:00:06 +00:00
ffxbld 8eeb283be2 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D137731
2022-02-04 19:26:02 +00:00
John M. Schanck 072f8043fa Bug 1748820 - land NSS NSS_3_75_RTM UPGRADE_NSS_RELEASE, r=bbeurdouche
```
2022-02-03  John M. Schanck  <jschanck@mozilla.com>

	* doc/rst/releases/index.rst:
	Release notes for NSS 3.75
	[27194d9a9ebd] [NSS_3_75_RTM] <NSS_3_75_BRANCH>

2022-02-03  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* lib/nss/nss.h, lib/softoken/softkver.h, lib/util/nssutil.h:
	Set version numbers to 3.75 final
	[151f1680d540] <NSS_3_75_BRANCH>
```

Differential Revision: https://phabricator.services.mozilla.com/D137783
2022-02-03 19:29:01 +00:00
Sylvestre Ledru 16b9c75459 Bug 1753127 - NSPR doc: move the doc into docs/nspr UPGRADE_NSS_RELEASE r=kaie,bbeurdouche
Depends on D137611

Differential Revision: https://phabricator.services.mozilla.com/D137612
2022-02-02 17:19:51 +00:00
Sylvestre Ledru a4e5da4d89 Bug 1753127 - NSPR doc: Add some missing content back UPGRADE_NSS_RELEASE r=kaie,bbeurdouche
Depends on D137607

Differential Revision: https://phabricator.services.mozilla.com/D137611
2022-02-02 17:19:50 +00:00
Sylvestre Ledru b30245fd89 Bug 1753127 - NSPR doc: fix some links in the various part of the doc UPGRADE_NSS_RELEASE r=bbeurdouche
Depends on D137590

Differential Revision: https://phabricator.services.mozilla.com/D137607
2022-02-02 17:19:50 +00:00
Sylvestre Ledru 2d8ab6f7be Bug 1753127 - NSPR doc: fix many different issues UPGRADE_NSS_RELEASE r=bbeurdouche
Depends on D137589

Differential Revision: https://phabricator.services.mozilla.com/D137590
2022-02-02 17:19:49 +00:00
Sylvestre Ledru ecac0317d5 Bug 1753127 - NSPR doc: Remove some old docs UPGRADE_NSS_RELEASE r=bbeurdouche
Depends on D137588

Differential Revision: https://phabricator.services.mozilla.com/D137589
2022-02-02 17:19:49 +00:00
Sylvestre Ledru 1666595fdb Bug 1753127 - NSPR doc: initial import UPGRADE_NSS_RELEASE r=bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D137588
2022-02-02 17:07:53 +00:00
Tom Ritter d59df896db Bug 1751494 - Move win32k logic from sandbox to apprunner r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D137324
2022-02-02 16:33:11 +00:00
Tom Ritter 6013bc9b5a Bug 1751494 - Add additional checks/returns to GetContentWin32kLockdownState r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D136802
2022-02-02 16:33:10 +00:00
Tom Ritter 77751c55be Bug 1751494 - Add new enum values to ContentWin32kLockdownState r=bobowen
Differential Revision: https://phabricator.services.mozilla.com/D136801
2022-02-02 16:33:10 +00:00
Bob Owen 48e1837edd Bug 1751367: Delay loading winmm.dll, so it loads after COM initialization. r=cmartin,media-playback-reviewers,alwu
This is to prevent user32.dll from loading before COM initialization on earlier
version of windows.

Differential Revision: https://phabricator.services.mozilla.com/D136936
2022-02-02 13:43:51 +00:00
Bob Owen 961ed234d4 Bug 1151941: Use an alternate winstation for the content process sandbox. r=cmartin
Differential Revision: https://phabricator.services.mozilla.com/D136935
2022-02-02 13:43:51 +00:00
Marian-Vasile Laza 944f53b58d Backed out 2 changesets (bug 1751367, bug 1151941) for causing marionette test failures. CLOSED TREE
Backed out changeset 0b12f1bb498a (bug 1751367)
Backed out changeset bba7c74dafae (bug 1151941)
2022-02-01 19:47:30 +02:00
Bob Owen b9d6b5e60a Bug 1751367: Delay loading winmm.dll, so it loads after COM initialization. r=cmartin,media-playback-reviewers,alwu
This is to prevent user32.dll from loading before COM initialization on earlier
version of windows.

Differential Revision: https://phabricator.services.mozilla.com/D136936
2022-02-01 13:31:33 +00:00
Bob Owen dd05abfc31 Bug 1151941: Use an alternate winstation for the content process sandbox. r=cmartin
Differential Revision: https://phabricator.services.mozilla.com/D136935
2022-02-01 13:31:33 +00:00
Masatoshi Kimura 66e773f594 Bug 1752683 - Stop passing 8.3 names to NSS for SQLite db paths. r=keeler,florian
We pass 8.3 names to NSS to avoid non-ASCII characters because NSS still
depends on the system code page (although this workaround is not effective on
East-Asian locales).

We don't have to use 8.3 names to NSS for SQLite db paths because SQLite
always use UTF-8 for file names.

Differential Revision: https://phabricator.services.mozilla.com/D137379
2022-01-31 19:43:36 +00:00
Andi-Bogdan Postelnicu 30631a4a9b Bug 1519636 - Reformat recent changes to the Google coding style. r=sylvestre
Updated with clang-format version 13.0.0 (taskcluster-dIIauZE0TkuXy6_23BQhcw)

# ignore-this-changeset

Differential Revision: https://phabricator.services.mozilla.com/D137147
2022-01-31 17:00:21 +00:00
ffxbld ebd97d7fe2 No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D137436
2022-01-31 14:29:01 +00:00
Benjamin Beurdouche 32bed2a81f Bug 1748820 - land NSS 54d55c10aad8 UPGRADE_NSS_RELEASE, r=beurdouche DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D137391
2022-01-30 18:22:02 +00:00
Benjamin Beurdouche 9c5781dbc5 Bug 1748820 - land NSS NSS_3_75_BETA1 UPGRADE_NSS_RELEASE, r=jschanck
```
2022-01-28  Benjamin Beurdouche  <bbeurdouche@mozilla.com>

	* doc/rst/releases/index.rst:
	Documentation: update the NSS release page
	[decce8ec4e72] [NSS_3_75_BETA1]

2022-01-19  Natalia Kulatova  <nkulatova@mozilla.com>

	* automation/taskcluster/docker-builds/Dockerfile,
	automation/taskcluster/graph/src/extend.js:
	Bug 1749030 - This patch adds gcc-9 and gcc-10 to the CI. r=nss-
	reviewers,bbeurdouche

	[581fe264710f]

2022-01-19  John M. Schanck  <jschanck@mozilla.com>

	* lib/mozpkix/tools/DottedOIDToCode.py:
	Bug 1749794 - Make DottedOIDToCode.py compatible with python3.
	r=nss-reviewers,bbeurdouche.

	[b5eff08becbb]

	* lib/ssl/sslcert.c:
	Bug 1749475 - Avoid undefined shift in SSL_CERT_IS while fuzzing.
	r=nss-reviewers,mt

	[c98fc11fb685]

2022-01-13  Martin Thomson  <mt@lowentropy.net>

	* lib/softoken/pkcs11c.c:
	Bug 1748386 - Remove redundant key type check, r=rrelyea

	[f9708b22f2f6]

	* automation/abi-check/expected-report-libssl3.so.txt:
	Bug 1749869 - Update ABI expectations to match ECH changes,
	r=bbeurdouche

	Depends on D135808

	[4b7cf8161421]
```

Differential Revision: https://phabricator.services.mozilla.com/D137309
2022-01-28 18:25:19 +00:00
Benjamin Beurdouche 777b562eb2 No bug - update the NSS release menu in firefox-source-docs with recent releases UPGRADE_NSS_RELEASE, r=sylvestre
Differential Revision: https://phabricator.services.mozilla.com/D137276
2022-01-28 11:00:15 +00:00