Kai Engert
45369f09f3
Bug 1445731, land NSS 2eefd697d661 UPGRADE_NSS_RELEASE, r=me
2018-04-11 12:54:08 +02:00
arthur.iakab
280690d83e
Merge mozilla-central to inbound
2018-04-11 01:02:05 +03:00
Nika Layzell
0c3ba13e4c
Bug 1437167 - Part 1: Stop using PRIntervalTime as the argument to CondVar::Wait and Monitor::Wait, r=mstange, r=froydnj
2018-04-10 17:49:47 -04:00
ffxbld
a822851bc4
No bug, Automated HPKP preload list update from host bld-linux64-spot-327 - a=hpkp-update
2018-04-10 13:54:43 -07:00
ffxbld
7951af6d38
No bug, Automated HSTS preload list update from host bld-linux64-spot-327 - a=hsts-update
2018-04-10 13:54:39 -07:00
Jan Beich
4c4327e871
Bug 1452509 - Make -DMOZ_ALSA global and prune duplicate -DMOZ_PULSEAUDIO. r=froydnj
...
MozReview-Commit-ID: 6O0pkscXczw
--HG--
extra : rebase_source : 0d8dffa1f8e4942b3fe8832ad860409ec24784a2
2018-03-19 02:13:04 +00:00
David Keeler
fd3dbbaaa3
bug 1453741 - (2/2) remove nsIX509CertDB.findCertByEmailAddress r=fkiefer,jcj
...
nsIX509CertDB.findCertByEmailAddress performs multiple certificate verifications
on the main thread, which is bad because it blocks the main thread and can cause
nested event loop spinning. Firefox doesn't even use this function. Other
products that use this function will either have to re-implement it locally or
find some other workaround.
MozReview-Commit-ID: HShl0H8cgxs
--HG--
extra : rebase_source : 63ee16b600ca7c2867352ee1ad791eb79b82a77c
2018-04-12 12:46:25 -07:00
David Keeler
2b9926416f
bug 1453741 - (1/2) remove nsIX509CertDB.verifyCert{AtTime,Now} r=fkiefer,jcj
...
These functions perform certificate verification on the main thread, which is
already a bad idea. They can also cause OCSP requests to be made from the main
thread, which will cause nested event loop spinning, which is an even worse
idea. Luckily this really only affects tests.
MozReview-Commit-ID: LqDAgDmlyER
--HG--
extra : rebase_source : c86414db0b6d6e7e83b5e3f371506b773813cdbf
2018-04-11 16:23:48 -07:00
Andreea Pavel
8e723a7457
Merge mozilla-inbound to mozilla-central. a=merge
2018-04-10 00:55:35 +03:00
ffxbld
be73b556ca
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2018-04-09 13:41:47 -07:00
ffxbld
f6fd590531
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2018-04-09 13:41:43 -07:00
Bob Owen
aaef814fdc
Bug 1452090: Only enable handle verifier on 32-bit Nightly and debug builds. r=jimm
...
This also adds the ability to enable it using the environement variable
MOZ_ENABLE_HANDLE_VERIFIER.
2018-04-09 19:22:28 +01:00
ffxbld
ed89d1323c
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-04-08 13:36:33 -07:00
ffxbld
47fd054933
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-04-08 13:36:29 -07:00
ffxbld
115b36861c
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-04-07 13:43:15 -07:00
ffxbld
56215bff29
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-04-07 13:43:11 -07:00
Noemi Erli
eb61878455
Merge inbound to mozilla-central. a=merge
2018-04-07 00:55:15 +03:00
ffxbld
befd24c6b5
No bug, Automated HPKP preload list update from host bld-linux64-spot-327 - a=hpkp-update
2018-04-06 13:51:28 -07:00
ffxbld
22c60c2e4c
No bug, Automated HSTS preload list update from host bld-linux64-spot-327 - a=hsts-update
2018-04-06 13:51:24 -07:00
Franziskus Kiefer
29fd899298
Bug 1450967 - mitm detection v0.0.1, r=keeler,johannh
...
Differential Revision: https://phabricator.services.mozilla.com/D839
--HG--
extra : amend_source : 7f1df88370d425230cfbe656742c30255dc6e08e
2018-03-16 11:36:50 +01:00
ffxbld
f148878e67
No bug, Automated HPKP preload list update from host bld-linux64-spot-326 - a=hpkp-update
2018-04-05 13:52:51 -07:00
ffxbld
5aba0e69b8
No bug, Automated HSTS preload list update from host bld-linux64-spot-326 - a=hsts-update
2018-04-05 13:52:47 -07:00
ffxbld
b9a5abc6cb
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-04-04 13:55:30 -07:00
ffxbld
2586dc163b
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-04-04 13:55:26 -07:00
Cosmin Sabou
0ae0457289
Backed out changeset 5be07e86738e (bug 1439383) for causing leaks (bug 1401883). a=backout
2018-04-04 21:03:38 +03:00
Cosmin Sabou
91c9d08e42
Merge inbound to mozilla-central. a=merge
2018-04-04 20:53:53 +03:00
Margareta Eliza Balazs
ca277b407b
Merge mozilla-central to inbound. a=merge CLOSED TREE
2018-04-04 12:51:48 +03:00
Franziskus Kiefer
688a9261d7
Bug 1445731 - land NSS 954032211d2d UPGRADE_NSS_RELEASE, r=me
2018-04-04 10:45:13 +02:00
ffxbld
ea8050e2b0
No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update
2018-04-03 13:48:33 -07:00
ffxbld
08d5281463
No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update
2018-04-03 13:48:29 -07:00
Ciure Andrei
b861d14e56
Merge mozilla-central to autoland. a=merge CLOSED TREE
2018-04-04 00:56:56 +03:00
Jed Davis
17bafad434
Bug 1450740 - Don't sandbox network namespace when X11 named sockets aren't accessible. r=gcp
...
MozReview-Commit-ID: KiL4GwMms3a
--HG--
extra : rebase_source : 08cfd2325d081eb95a4a69805077828bfbb521ac
2018-04-02 15:19:04 -06:00
ffxbld
5158a406f7
No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update
2018-04-02 14:03:17 -07:00
ffxbld
68c7ae8378
No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update
2018-04-02 14:03:13 -07:00
ffxbld
dafc1094f6
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-04-01 19:11:09 -07:00
ffxbld
bc62258c3c
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-04-01 19:11:05 -07:00
ffxbld
f7fdb9dae5
No bug, Automated HPKP preload list update from host bld-linux64-spot-325 - a=hpkp-update
2018-03-31 14:00:13 -07:00
ffxbld
0cc199f815
No bug, Automated HSTS preload list update from host bld-linux64-spot-325 - a=hsts-update
2018-03-31 14:00:10 -07:00
ffxbld
dd8e8d3d86
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2018-03-30 21:57:51 -07:00
ffxbld
796d46d5c5
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2018-03-30 21:57:48 -07:00
J.C. Jones
c66f288715
Bug 1445731 - land NSS 6ae3ab8a1e7b UPGRADE_NSS_RELEASE, r=me
...
--HG--
extra : rebase_source : bffce425114dbe0f2cf6095dea5adc40aa09ea9e
2018-03-30 08:52:56 -07:00
David Keeler
3085269fe3
bug 1056341 - introduce a budget for path searching in mozilla::pkix to avoid unbounded search r=fkiefer,jcj
...
MozReview-Commit-ID: Ght1wx5lb34
--HG--
extra : rebase_source : 46ed1910c5c4fc5b3695f7ee593c2baebe45a9ff
2018-03-27 15:35:50 -07:00
Ciure Andrei
5d841a3421
Merge inbound to mozilla-central. a=merge
2018-03-30 01:06:18 +03:00
ffxbld
a9fc548e72
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-03-29 13:39:43 -07:00
ffxbld
768c746599
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-03-29 13:39:39 -07:00
David Keeler
d8435632fc
bug 1424311 - don't persist the certificate exception dialog's size so it doesn't grow unboundedly r=jcj
...
window.sizeToContent() apparently interacts poorly with windows that have a
persisted size (see bug 90276, which is a 5-digit bug that hasn't been touched
in over a decade). As a workaround, don't persist the certificate exception
dialog's size. This means we have to call window.sizeToContent() more often and
unfortunately results in the window growing and shrinking again on Windows, but
at least it will always be the "right size" for its content.
MozReview-Commit-ID: 9UT3X8IEqZg
--HG--
extra : rebase_source : 9d968748bd77328eea4ae11e1ae746de9401fb4d
2018-03-28 13:43:03 -07:00
Gurzau Raul
d117255a14
Merge inbound to mozilla-central. a=merge
2018-03-29 00:55:16 +03:00
ffxbld
3a0bbe90a6
No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update
2018-03-28 13:43:42 -07:00
ffxbld
cb9393f7c7
No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update
2018-03-28 13:43:38 -07:00
Bob Owen
cfaaf3c336
Bug 1449480: Don't crash in opt builds when scoped_handle.cc CloseHandleWrapper fails. r=jimm
...
I'm not adding a patch to security/sandbox/chromium-shim/patches for this,
because we need to get this fixed ASAP, certainly before we take another update.
2018-03-28 16:07:15 +01:00
Margareta Eliza Balazs
7f19ad998a
Merge mozilla-central to autoland. a=merge CLOSED TREE
2018-03-28 00:59:33 +03:00
Margareta Eliza Balazs
adebb06ac1
Merge inbound to mozilla-central. a=merge
2018-03-28 00:48:11 +03:00
ffxbld
a359cb4b0f
No bug, Automated HPKP preload list update from host bld-linux64-spot-326 - a=hpkp-update
2018-03-27 13:35:58 -07:00
ffxbld
75fdd4ddaf
No bug, Automated HSTS preload list update from host bld-linux64-spot-326 - a=hsts-update
2018-03-27 13:35:54 -07:00
Bogdan Tara
302a55b534
Merge inbound to mozilla-central. a=merge
2018-03-27 12:12:57 +03:00
Coroiu Cristina
ed9d3656c8
Merge mozilla-central to inbound a=merge on a CLOSED TREE
2018-03-26 23:58:59 +03:00
ffxbld
a3336ea2e2
No bug, Automated HPKP preload list update from host bld-linux64-spot-324 - a=hpkp-update
2018-03-26 13:20:52 -07:00
ffxbld
9eb99d8544
No bug, Automated HSTS preload list update from host bld-linux64-spot-324 - a=hsts-update
2018-03-26 13:20:48 -07:00
Henri Sivonen
77b94189e1
Bug 1448756 - Use AssignLiteral and AssignASCII for short zero-terminated strings in PSM. r=keeler.
...
MozReview-Commit-ID: 9GUHkUG6SlP
--HG--
extra : rebase_source : 593c57761877018db8c7f4acfd7f0f8251060074
2018-03-26 09:13:14 +03:00
David Keeler
b0d30e4bf9
bug 1449060 - remove some dynamic OIDs from the certificate viewer that don't serve any purpose r=fkiefer
...
MozReview-Commit-ID: IccdDvYMTP4
--HG--
extra : rebase_source : bedc23b8b49cc6f4fedf5d7f17932bc971e78d20
2018-03-26 17:21:04 -07:00
Franziskus Kiefer
5c6b90f0b8
Bug 1448787 - separate error for self-signed certs, r=keeler,johannh
...
Reviewed By: keeler, johannh
Bug #: 1448787
Differential Revision: https://phabricator.services.mozilla.com/D805
--HG--
extra : rebase_source : 3a9317445c7df5f09675da67888930304b75fc4b
2018-03-29 11:51:33 +02:00
Bob Owen
039665fa5e
Bug 1447019 Part 3: Use MITIGATION_WIN32K_DISABLE for GMP processes based on a pref. r=jimm
2018-03-27 14:09:32 +01:00
Bob Owen
41ce6696f9
Bug 1447019 Part 2: Move running from a network drive check into WinUtils. r=jimm
2018-03-27 14:09:32 +01:00
Franziskus Kiefer
806baa5430
Bug 1415279 - Move error strings for certError and netError pages to frontend, r=johannh,keeler,Honza,snorp
...
This patch moves all TLS error string handling to the frontend.
Dev-tools doesn't show the same error code as the page does anymore but only the error code as string.
All logging of these error messages has been removed.
Bug #: 1415279
Differential Revision: https://phabricator.services.mozilla.com/D607
--HG--
extra : rebase_source : 61e2d94cb21ef4c02b81448531609205c85a9707
2018-03-27 13:31:52 +02:00
ffxbld
5dd69d1516
No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update
2018-03-25 13:32:21 -07:00
ffxbld
97b38a3ffb
No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update
2018-03-25 13:32:17 -07:00
shindli
2640499cc4
Merge autoland to mozilla-central. a=merge
2018-03-25 12:32:20 +03:00
ffxbld
854a93183e
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2018-03-25 00:41:27 -07:00
ffxbld
65b51bcedd
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2018-03-25 00:41:23 -07:00
ffxbld
d380323764
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2018-03-24 00:08:51 -07:00
ffxbld
090a596545
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2018-03-24 00:08:47 -07:00
J.C. Jones
2e7f40ab63
Bug 1445731 - land NSS 1bde21f90bd1 UPGRADE_NSS_RELEASE, r=me
...
--HG--
extra : rebase_source : b23946c3f8f8ca33b1fe42f67febe604d36c6411
2018-03-22 14:40:30 -07:00
Doug Thayer
7874b62da6
Bug 1444290 - Forget bg SDR runnable reference when dispatching r=froydnj
...
We're seeing a crash in tests from trying to release the promise in
this runnable from the background thread we create to run this
method. The only way I can see that happening is that the bg thread
loses the race with the main thread to drop its reference to the
runnable, causing it to call the destructor. Rather than calling the
helper that adds a reference to the runnable and then forgets it,
let's just forget it here.
MozReview-Commit-ID: LXpC8Kr2SBb
--HG--
extra : rebase_source : bfed3ed4128c6a3ede6f06feed1f50cb9f30e485
2018-03-22 09:31:40 -07:00
Mathieu Leplatre
76bc359e79
Bug 1397230 - Generalize blocklist clients to remote settings clients r=mgoodwin
...
MozReview-Commit-ID: 9VAsTFCuZUf
--HG--
rename : services/common/tests/unit/test_blocklist_updater.js => services/common/tests/unit/test_remote_settings_poll.js
extra : rebase_source : 9da338f18f3860e124b315a8be3340997343e2f3
2018-03-13 16:23:57 +01:00
ffxbld
ecdda28482
No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update
2018-03-22 13:22:03 -07:00
ffxbld
a305f35f68
No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update
2018-03-22 13:21:59 -07:00
ffxbld
55d5f75f65
No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update
2018-03-21 13:10:14 -07:00
ffxbld
b8bfc106c1
No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update
2018-03-21 13:10:10 -07:00
Cosmin Sabou
66b7c55e79
Merge mozilla-central to inbound. a=merge CLOSED TREE
2018-03-21 00:51:18 +02:00
Cosmin Sabou
52c9a5448e
Merge inbound to mozilla-central. a=merge
2018-03-21 00:24:33 +02:00
Cosmin Sabou
0457be96b5
Merge autoland to mozilla-central. a=merge
2018-03-21 00:23:17 +02:00
ffxbld
5fe3417f0b
No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update
2018-03-20 13:10:29 -07:00
ffxbld
ff82f5097d
No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update
2018-03-20 13:10:25 -07:00
J.C. Jones
7780b45b3a
Bug 1445731 - land NSS c5dffd6269ea UPGRADE_NSS_RELEASE, r=me
...
--HG--
extra : rebase_source : a740ebebda8a9894cfebcff25d21a9430c478f96
2018-03-20 10:17:35 -07:00
J.C. Jones
175c45e2dc
Bug 1444440 - Ensure the correct error is emitted for policy distrusts r=keeler
...
Bug 1441223
added MOZILLA_PKIX_ERROR_ADDITIONAL_POLICY_CONSTRAINT_FAILED to be
emitted when we hit certificates affected by the Symantec distrust.
Since some sites have multiple certificate trust paths possible, sometimes
SEC_ERROR_UNKNOWN_ISSUER is emitted instead of the more specific error.
This patch uses a flag to ensure that the specific error is emitted out of the
Cert Verifier.
--HG--
extra : rebase_source : a961d2e713ae342222d85dff6f83ed3bcaa8006b
2018-03-14 14:01:35 -07:00
Margareta Eliza Balazs
922c555275
Merge mozilla-central to autoland. a=merge CLOSED TREE
2018-03-20 19:00:25 +02:00
David Keeler
bade5ee518
bug 1439383 - clean up the load loadable roots thread when we're done with it r=froydnj,jcj
...
MozReview-Commit-ID: J5GnpwxYguz
--HG--
extra : rebase_source : 14abdefbbee91b13ae26104d093e6fba20432c05
2018-03-16 16:50:19 -07:00
Bob Owen
cf86e40aa1
Bug 1445167
Part 2: Make LOG_FATAL messages in chromium sandbox code crash. r=jld
2018-03-20 10:45:31 +00:00
Bob Owen
af1e9f58c5
Bug 1445167
Part 1: Revert change to make USER_NON_ADMIN a blacklist. r=handyman
...
This is only used by default in the file content process now and we also have a
FILES_ALLOW_READONLY rule for all paths anyway.
2018-03-20 10:42:05 +00:00
ffxbld
19da7222e8
No bug, Automated HPKP preload list update from host bld-linux64-spot-326 - a=hpkp-update
2018-03-19 13:10:23 -07:00
ffxbld
43d9f7b3ef
No bug, Automated HSTS preload list update from host bld-linux64-spot-326 - a=hsts-update
2018-03-19 13:10:19 -07:00
ffxbld
7f196c986b
No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update
2018-03-17 13:08:00 -07:00
ffxbld
36c23ec671
No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update
2018-03-17 13:07:56 -07:00
ffxbld
fed3513bca
No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update
2018-03-16 12:56:58 -07:00
ffxbld
b97ded4fa8
No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update
2018-03-16 12:56:54 -07:00
Sylvestre Ledru
fa45a3c670
Bug 1443080 - Use the static call for static methods (not instance) r=Ehsan
...
MozReview-Commit-ID: JwHh4bzxuTR
--HG--
extra : rebase_source : 5f5e37517aa80c2e7b5933962178d761074886e7
2018-03-16 14:29:15 +01:00
Haik Aftandilian
331dda9367
Bug 1444291 - Part 3 - Add read access to the Mac Flash sandbox, support sandbox levels r=Alex_Gaynor
...
Replace the boolean pref "security.sandbox.mac.flash.enabled"
with "dom.ipc.plugins.sandbox-level.flash" to support sandbox
levels and be consistent with the Windows pref name.
Adds filesystem read access to the sandbox using sandbox extensions
granted by the file dialog machinery (level 1).
Add support for level 2 which blocks read access.
Allow the sandbox to be disabled with MOZ_DISABLE_NPAPI_SANDBOX.
MozReview-Commit-ID: 4rfobEoxQpF
--HG--
extra : rebase_source : 05dc54b46063967e959bc3fced21c61e5463de48
2018-03-15 20:23:19 -07:00
Haik Aftandilian
b8c5b2eae6
Bug 1444291 - Part 2 - Add additional sysctl access to the Mac Flash sandbox r=Alex_Gaynor
...
Adds additional sysctls that are used by the Flash plugin process and alphabetize the list.
MozReview-Commit-ID: 7CaPtaKe874
--HG--
extra : rebase_source : 909228ef9617029eaf7cb16565751150cd1c7404
2018-03-07 22:07:27 -08:00
Haik Aftandilian
09693ee75d
Bug 1444291 - Part 1 - Reduce Mac Flash sandbox cache and temp dir permissions r=Alex_Gaynor
...
Remove access to DARWIN_USER_CACHE_DIR. Limit DARWIN_USER_TEMP_DIR
access to the FlashTmp subdirectory. Remove xattr read access to
~/Library/Caches/ and ~/Library/Preferences.
MozReview-Commit-ID: 9svk0BoxVXs
--HG--
extra : rebase_source : 5ea9c7ecc0189455eceb190fb300170d42d0b890
2018-03-15 17:33:12 -07:00
Sebastian Hengst
d247fb5f4e
Bug 1445763 - Update moz.build meta data with "Firefox Build System". r=froydnj
...
MozReview-Commit-ID: 3FrWJ6441pe
--HG--
extra : rebase_source : c8f1dc45041132252e28869ada6a386270267431
2018-03-14 21:44:46 +01:00