Francesco Lodolo (:flod)
0b2047cb81
Bug 320231 - Update localization notes for length-limited PKCS#11 strings in pipnss.properties r=Pike
...
MozReview-Commit-ID: 11iUjRi8eUX
--HG--
extra : rebase_source : 029f6e8a06a0d2903297d1726352c584f69ce69d
2017-12-06 12:11:59 +01:00
Tristan Bourvon
1d42ce1f7b
Bug 1412646 - Initialize some uninitialized fields in security/manager/ r=keeler
...
MozReview-Commit-ID: HGj8xw5Uq6j
--HG--
extra : rebase_source : 8c9bd7b966bfdead6244c71642a843e8b9e507ff
2017-10-31 11:04:40 +01:00
Narcis Beleuzu
1f7fdd5826
Merge mozilla-central to inbound. r=merge a=merge on a CLOSED TREE
2017-12-06 01:49:19 +02:00
ffxbld
4df7f01104
No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update
2017-12-05 12:00:21 -08:00
ffxbld
276f13a7ec
No bug, Automated HSTS preload list update from host bld-linux64-spot-037 - a=hsts-update
2017-12-05 12:00:17 -08:00
ffxbld
fdadcd5373
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-12-05 11:21:42 -08:00
ffxbld
1516337050
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-12-05 11:21:38 -08:00
shindli
2e08acdf88
Merge inbound to mozilla-central r=merge a=merge
2017-12-05 11:58:51 +02:00
shindli
7c657fc158
Merge autoland to mozilla-central r=merge a=merge
2017-12-05 11:57:21 +02:00
ffxbld
795d7ec557
No bug, Automated HPKP preload list update from host bld-linux64-spot-031 - a=hpkp-update
2017-12-04 15:45:48 -08:00
ffxbld
8294b83561
No bug, Automated HSTS preload list update from host bld-linux64-spot-031 - a=hsts-update
2017-12-04 15:45:44 -08:00
ffxbld
2dd6a8b4ce
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-12-04 11:15:44 -08:00
ffxbld
28bd5a677f
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-12-04 11:15:40 -08:00
ffxbld
5fa824ebb0
No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update
2017-12-03 11:42:48 -08:00
ffxbld
423369169d
No bug, Automated HSTS preload list update from host bld-linux64-spot-037 - a=hsts-update
2017-12-03 11:42:45 -08:00
ffxbld
fd3700d56b
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-12-03 11:03:49 -08:00
ffxbld
c321b37eee
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-12-03 11:03:45 -08:00
EKR
477ac066b5
Bug 1422156 - Update tlsFlags to change 0x40 to be compat mode rather than 7e02 handshake. r=keeler
...
Reviewers: keeler
Reviewed By: keeler
Subscribers: mcmanus
Bug #: 1422156
Differential Revision: https://phabricator.services.mozilla.com/D306
2017-12-02 17:18:33 -08:00
manikishan
8752d4637d
Bug 1198481 - Fixed typo 'id_pk_serverAuth' to 'id_kp_serverAuth'. r=keeler
2017-12-02 18:03:18 +05:30
David Keeler
e6fe3285be
bug 1421816 - (2/2) add option to sign_app.py to include COSE signatures r=franziskus
...
MozReview-Commit-ID: H7ZLCsH9HrJ
--HG--
extra : rebase_source : 143ac8bdac4cf000809ada4560382bb9ed582b55
extra : histedit_source : fbb72d143a54fa1cd79af560d515068dcc4610ab
2017-11-29 13:37:42 -08:00
ffxbld
1aeab12df2
No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update
2017-12-02 11:45:05 -08:00
ffxbld
932f702aac
No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update
2017-12-02 11:45:01 -08:00
ffxbld
8466d82737
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-12-02 11:01:49 -08:00
ffxbld
2955ac7f1c
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-12-02 11:01:45 -08:00
David Keeler
36f5d05cd8
bug 1397837 - remove vestigial references to "code signing" from PSM r=Cykesiopka,snorp
...
As of bug 1257362, the platform does not verify code signing certificates in
general, so anything involving the code signing trust of certificates can go.
MozReview-Commit-ID: 9g9kM62xfYZ
--HG--
extra : rebase_source : 5bec64e5f451c8433aff0de82a91f7bd54c24608
2017-12-01 16:16:20 -08:00
David Keeler
a92c339a33
bug 1424085 - add owning handles so cert references don't leak in IsCertificateDistrustImminent r=jcj
...
nsIX509Cert::GetCert() returns a CERTCertificate whose reference count has
already been increased. Before this patch, when IsCertificateDistrustImminent
called CertDNIsInList(rootCert->GetCert(), RootSymantecDNs) and
CertDNIsInList(aCert->GetCert(), RootAppleAndGoogleDNs), the reference count on
those certificates would never get a corresponding decrement, so we would keep
those certificates alive until shut down. A reasonable and consistent solution
is to introduce a UniqueCERTCertificate handle in each case to own the
reference.
The status of this fix can be verified by setting MOZ_LOG="pipnss:4", running
Firefox, connecting to any host, and then shutting down. If an NSS resource
reference has been leaked, "[Main Thread]: E/pipnss NSS SHUTDOWN FAILURE" will
be in the console output. Otherwise,
"[Main Thread]: D/pipnss NSS shutdown =====>> OK <<=====" will be in the console
output.
This patch also removes nsIX509CertList::DeleteCert because it would also leak a
reference. Luckily, nothing was using it.
This patch also clarifies the implementation of nsIX509CertList::AddCert by
making the ownership transfers explicit.
MozReview-Commit-ID: 2qHo3DmhTPz
--HG--
extra : rebase_source : 42cd42d082431b4637733d8f94fcd560bdea8a44
2017-12-07 15:08:43 -08:00
Jed Davis
7e9b75f531
Bug 1409895 - Deny getcwd in the Linux content process sandbox. r=gcp
...
getcwd won't do anything useful once we start chroot()ing to remove
filesystem access; with this patch it will at least fail the same way
regardless of whether user namespaces are available or if other factors
prevent complete FS isolation.
Bonus fix: improve the comments for this group of syscalls.
MozReview-Commit-ID: KueZzly2mlO
--HG--
extra : rebase_source : a6b5dbebbc4d2477909d46085499f2648091b94c
2017-11-20 10:47:54 -07:00
Sylvestre Ledru
a9961096c0
Bug 1394734 - Simplify various corner cases r=glandium
...
MozReview-Commit-ID: 4s4JdXZPvmv
--HG--
extra : rebase_source : c8f663c99442d41db5f81ac5fe1aa1f47fd5ed82
2017-12-07 22:10:19 +01:00
Sylvestre Ledru
4591d82b23
Bug 1394734 - Replace CONFIG['CLANG*'] by CONFIG['CC_TYPE'] r=glandium
...
MozReview-Commit-ID: HbF5oT5HW6f
--HG--
extra : rebase_source : eca479b6ae4bff7f600d1cdb39e11ac2057e4e79
2017-12-07 22:09:38 +01:00
Sylvestre Ledru
5de63ef061
Bug 1394734 - Replace CONFIG['MSVC'] by CONFIG['CC_TYPE'] r=glandium
...
MozReview-Commit-ID: 5orfnoude7h
--HG--
extra : rebase_source : 1ed9a6b56e1d27221a07624767a7fb0e6147117f
2017-12-08 13:46:13 +01:00
Sylvestre Ledru
9bfe27d903
Bug 1394734 - Replace CONFIG['GNU_C*'] by CONFIG['CC_TYPE'] r=glandium
...
MozReview-Commit-ID: 7duJk2gSd4m
--HG--
extra : rebase_source : 7312fe276e561e8c034a5f6749774ae812727f9c
2017-12-07 22:09:15 +01:00
Cosmin Sabou
79d933ec34
Backed out 22 changesets (bug 1399787) for shutdown leaks on windows 7 debug tc-M without e10s r=backout on a CLOSED TREE
...
Backed out changeset 463d676df5da (bug 1399787)
Backed out changeset fc9776a2605d (bug 1399787)
Backed out changeset 2e91a90dfbc3 (bug 1399787)
Backed out changeset e82ab72f71ee (bug 1399787)
Backed out changeset d7fef200e8b9 (bug 1399787)
Backed out changeset a7d70f7f3335 (bug 1399787)
Backed out changeset 2800f9d20d96 (bug 1399787)
Backed out changeset 9dfa404abf9d (bug 1399787)
Backed out changeset 09b3c172a01e (bug 1399787)
Backed out changeset f9fd3e750636 (bug 1399787)
Backed out changeset 01284c55bf8a (bug 1399787)
Backed out changeset c2ab1b454283 (bug 1399787)
Backed out changeset e7bfa51404c5 (bug 1399787)
Backed out changeset 3fd2a734f887 (bug 1399787)
Backed out changeset ef21f295db3f (bug 1399787)
Backed out changeset c186893ce0fc (bug 1399787)
Backed out changeset 323da3bddaaa (bug 1399787)
Backed out changeset 3b89f189edff (bug 1399787)
Backed out changeset a47bd86c35ee (bug 1399787)
Backed out changeset 558526301a4c (bug 1399787)
Backed out changeset baa99fb50ba9 (bug 1399787)
Backed out changeset 6d82ed0ba805 (bug 1399787)
2017-12-08 13:09:56 +02:00
Brindusan Cristian
5b9ee89503
Merge mozilla-central to autoland a=merge r=merge on a CLOSED TREE
2017-12-08 12:06:24 +02:00
cku
d70af3d034
Bug 1399787 - Part 9. Sandbox the PDFium process. r=bobowen,jwatt
...
MozReview-Commit-ID: 6ED7EPZvOMR
--HG--
extra : rebase_source : 60e6d103573436d923f8b2b00c70cb2a4a7986df
extra : intermediate-source : d90c5064d88a6468c1209f4a78ec7631592eec98
extra : source : 91b761e38efd28a69647c38531f5418fffee8f50
2017-10-18 20:52:45 +08:00
Brindusan Cristian
5bedf1df18
Merge autoland to mozilla-central r=merge a=merge
2017-11-30 23:51:58 +02:00
ffxbld
6eac8dccfc
No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update
2017-11-30 11:03:17 -08:00
ffxbld
39509ef8f2
No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update
2017-11-30 11:03:13 -08:00
ffxbld
9175066393
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2017-11-30 10:49:34 -08:00
ffxbld
83f995c0a0
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2017-11-30 10:49:30 -08:00
ffxbld
8b1f82ef39
No bug, Automated HPKP preload list update from host bld-linux64-spot-320 - a=hpkp-update
2017-11-29 11:07:42 -08:00
ffxbld
d471604f22
No bug, Automated HSTS preload list update from host bld-linux64-spot-320 - a=hsts-update
2017-11-29 11:07:38 -08:00
ffxbld
2b8c0a2be5
No bug, Automated HPKP preload list update from host bld-linux64-spot-341 - a=hpkp-update
2017-11-29 10:13:03 -08:00
ffxbld
73f3ea227b
No bug, Automated HSTS preload list update from host bld-linux64-spot-341 - a=hsts-update
2017-11-29 10:12:59 -08:00
Dorel Luca
b3d418aa6c
Merge autoland to mozilla-central r=merge a=merge
2017-11-29 12:09:11 +02:00
ffxbld
f54d52a50d
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-28 11:45:43 -08:00
ffxbld
61c54f501b
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-28 11:45:40 -08:00
ffxbld
d7a19d2216
No bug, Automated HPKP preload list update from host bld-linux64-spot-032 - a=hpkp-update
2017-11-28 10:46:06 -08:00
ffxbld
812cb244f0
No bug, Automated HSTS preload list update from host bld-linux64-spot-032 - a=hsts-update
2017-11-28 10:46:03 -08:00
David Keeler
13b5a0e017
bug 1421413 - add a preference to control which add-on signature algorithms are valid r=jcj
...
MozReview-Commit-ID: EwkpY9ADAtw
--HG--
extra : rebase_source : 7fce75b0ff7b42057840df0450d97ce840a69c89
2017-11-28 14:24:11 -08:00
Alex Gaynor
52d69a63ca
Bug 1421372 - simplify the macOS content sandbox rules by splitting the file process rules out; r=haik
...
MozReview-Commit-ID: GJukCOAyE10
--HG--
extra : rebase_source : 7bfdd02482d45e72a785ec2abe2260577238406d
2017-11-28 14:06:06 -05:00
ffxbld
a04e49663b
No bug, Automated HPKP preload list update from host bld-linux64-spot-035 - a=hpkp-update
2017-11-27 11:34:28 -08:00
ffxbld
f5bdc50a83
No bug, Automated HSTS preload list update from host bld-linux64-spot-035 - a=hsts-update
2017-11-27 11:34:24 -08:00
ffxbld
5fd51d8f5b
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-27 11:04:50 -08:00
ffxbld
6c2b138c87
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-27 11:04:46 -08:00
ffxbld
899f55bc70
No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update
2017-11-26 11:29:24 -08:00
ffxbld
b7e36e0dad
No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update
2017-11-26 11:29:20 -08:00
ffxbld
a1b8503be3
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-26 10:57:54 -08:00
ffxbld
ad8f2d950c
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-26 10:57:51 -08:00
ffxbld
fde154d757
No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update
2017-11-25 11:31:33 -08:00
ffxbld
b75d3913b0
No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update
2017-11-25 11:31:30 -08:00
ffxbld
24ce5b57e7
No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update
2017-11-25 10:49:45 -08:00
ffxbld
80fa133054
No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update
2017-11-25 10:49:41 -08:00
Ciure Andrei
327405164b
Merge inbound to mozilla-central r=merge a=merge
2017-11-25 00:04:02 +02:00
ffxbld
b8d5e9b625
No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update
2017-11-24 11:37:55 -08:00
ffxbld
1f4c6721e4
No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update
2017-11-24 11:37:51 -08:00
ffxbld
75089cd8b7
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-24 11:00:34 -08:00
ffxbld
a29abc7f7d
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-24 11:00:30 -08:00
Franziskus Kiefer
5083a36782
Bug 1420060 - FIPS can no longer be toggled in Firefox with the builtin NSS, r=ttaubert
...
MozReview-Commit-ID: 5lgEBiFozSG
Differential Revision: https://phabricator.services.mozilla.com/D282
--HG--
extra : rebase_source : 795b81b79f5c407cbfed3c0607c479d9880f0deb
2017-11-24 09:01:49 +01:00
Franziskus Kiefer
34900c8a57
Bug 1420060 - land NSS ceb8b9290b35 UPGRADE_NSS_RELEASE, r=me
...
MozReview-Commit-ID: KprUV50uNDs
--HG--
extra : rebase_source : d67b83423351ac6581889cc95ec979a6f12adc07
2017-11-24 09:00:26 +01:00
Gurzau Raul
21905d169e
Merge mozilla-central to mozilla-inbound. r=merge a=merge CLOSED TREE
2017-11-24 00:38:13 +02:00
Tiberius Oros
da0a72a9d7
Merge inbound to mozilla-central r=merge a=merge
2017-11-24 00:28:29 +02:00
ffxbld
7ede3e4787
No bug, Automated HPKP preload list update from host bld-linux64-spot-036 - a=hpkp-update
2017-11-23 11:37:49 -08:00
ffxbld
eb15ed90ea
No bug, Automated HSTS preload list update from host bld-linux64-spot-036 - a=hsts-update
2017-11-23 11:37:46 -08:00
ffxbld
4018e652ff
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-23 10:42:06 -08:00
ffxbld
ce8ed40893
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-23 10:42:02 -08:00
Cosmin Sabou
a5d613086a
Merge mozilla-inbound to mozilla-central r=merge a=merge
2017-11-23 11:42:46 +02:00
Franziskus Kiefer
7b10164f9f
Bug 1403840 - add cose rust lib with a test, r=keeler,ttaubert
...
Summary:
This adds the COSE rust library from https://github.com/franziskuskiefer/cose-rust with its C API from https://github.com/franziskuskiefer/cose-c-api to gecko with a basic test.
The COSE library will be used for verifying add-on signatures in future.
Reviewers: keeler, ttaubert
Reviewed By: keeler
Bug #: 1403840
Differential Revision: https://phabricator.services.mozilla.com/D232
--HG--
extra : rebase_source : 433ca6894d88ccda333bfac53507eba4e84924fb
2017-11-22 16:37:15 +01:00
shindli
a0b20fcb81
Merge mozilla-central to mozilla-autoland. r=merge a=merge CLOSED TREE
2017-11-22 23:42:02 +02:00
shindli
82254ca1cf
Merge inbound to mozilla-central r=merge a=merge
2017-11-22 23:29:44 +02:00
ffxbld
ad970571e9
No bug, Automated HPKP preload list update from host bld-linux64-spot-032 - a=hpkp-update
2017-11-22 11:38:06 -08:00
ffxbld
013da9f3f3
No bug, Automated HSTS preload list update from host bld-linux64-spot-032 - a=hsts-update
2017-11-22 11:38:02 -08:00
ffxbld
2795ad9547
No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update
2017-11-22 10:46:15 -08:00
ffxbld
36b4732f5f
No bug, Automated HSTS preload list update from host bld-linux64-spot-037 - a=hsts-update
2017-11-22 10:46:12 -08:00
Michal Novotny
96f9c8ac5c
Bug 1418752 - Firefox instahang on start after landing patch from bug #1392841 . r=ttaubert
...
EnsureNSSInitializedChromeOrContent() sends sync event to main thread from non-main thread even if it's already initialized. This can make fix at https://searchfox.org/mozilla-central/rev/919dce54f43356c22d6ff6b81c07ef412b1bf933/netwerk/protocol/http/nsHttpHandler.cpp#2105 inefficient and can lead to a deadlock.
--HG--
extra : rebase_source : 18333d17e1d959accd667c8ce25a20ea51c15266
2017-11-22 12:46:08 -05:00
Gabriele Svelto
80fbb39861
Bug 1402519 - Remove MOZ_CRASHREPORTER directives from security; r=ttaubert
...
MozReview-Commit-ID: CfPBvffjEhq
--HG--
extra : rebase_source : 51c522746b48f0819b926607ceebf7d070df4ffd
2017-10-10 15:25:39 +02:00
ffxbld
5fbf717e5b
No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update
2017-11-21 11:48:53 -08:00
ffxbld
d05982f0f1
No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update
2017-11-21 11:48:49 -08:00
ffxbld
511b2cf5e6
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-21 11:14:55 -08:00
ffxbld
cf7bf94e79
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-21 11:14:52 -08:00
ffxbld
cde731d2d0
No bug, Automated HPKP preload list update from host bld-linux64-spot-034 - a=hpkp-update
2017-11-20 11:37:26 -08:00
ffxbld
d7e570ab96
No bug, Automated HSTS preload list update from host bld-linux64-spot-034 - a=hsts-update
2017-11-20 11:37:22 -08:00
ffxbld
21d7bcc344
No bug, Automated HPKP preload list update from host bld-linux64-spot-030 - a=hpkp-update
2017-11-20 10:57:37 -08:00
ffxbld
2fb6a219c1
No bug, Automated HSTS preload list update from host bld-linux64-spot-030 - a=hsts-update
2017-11-20 10:57:34 -08:00
Bogdan Tara
b3f0c3ded3
Merge mozilla-central to autoland. r=merge a=merge on a CLOSED TREE
2017-11-20 00:17:43 +02:00
ffxbld
c21102410d
No bug, Automated HPKP preload list update from host bld-linux64-spot-039 - a=hpkp-update
2017-11-19 11:40:51 -08:00
ffxbld
502a538775
No bug, Automated HSTS preload list update from host bld-linux64-spot-039 - a=hsts-update
2017-11-19 11:40:47 -08:00
ffxbld
3fc5579f87
No bug, Automated HPKP preload list update from host bld-linux64-spot-038 - a=hpkp-update
2017-11-19 10:55:01 -08:00
ffxbld
6b1e59b641
No bug, Automated HSTS preload list update from host bld-linux64-spot-038 - a=hsts-update
2017-11-19 10:54:58 -08:00
Gurzau Raul
79f64eb568
Merge inbound to mozilla-central r=merge a=merge
2017-11-18 22:48:47 +02:00
ffxbld
22b9cb8f84
No bug, Automated HPKP preload list update from host bld-linux64-spot-037 - a=hpkp-update
2017-11-18 11:41:00 -08:00