Граф коммитов

12340 Коммитов

Автор SHA1 Сообщение Дата
Haik Aftandilian 414270b14a Bug 1403669 - [Mac] Per-user and system extensions dir regexes only work for 1-character subdirectory names. r=Alex_Gaynor
MozReview-Commit-ID: L9vNruzMEez

--HG--
extra : rebase_source : 8530cbf1baef919a5a379564d190fb08674aa28d
2017-09-27 11:48:39 -07:00
Wes Kocher eb9a2ed0f2 Merge inbound to central, a=merge
MozReview-Commit-ID: IqwKWn7ceHC
2017-09-29 14:47:25 -07:00
Wes Kocher 1b5b528b2e Merge autoland to central, a=merge
MozReview-Commit-ID: LJgJXsmBQcx
2017-09-29 14:45:37 -07:00
ffxbld f2b181af94 No bug, Automated HPKP preload list update from host bld-linux64-spot-327 - a=hpkp-update 2017-09-29 10:33:54 -07:00
ffxbld 00f17ea93c No bug, Automated HSTS preload list update from host bld-linux64-spot-327 - a=hsts-update 2017-09-29 10:33:50 -07:00
Sebastian Hengst 5253bb7207 merge autoland to mozilla-central. r=merge a=merge
MozReview-Commit-ID: 2gWLO0vz64b
2017-09-29 13:30:42 +02:00
Alex Gaynor d1aef777b6 Bug 1404426 - Simplify the macOS content sandbox policy; r=haik
This does two things:

1) Move the level 3 rules to always be applicable, and simplifies level 2 accordingly
2) Consistently uses the raw string literal syntax for regexes

MozReview-Commit-ID: 6iwjOvRVMM7

--HG--
extra : rebase_source : 3ac59219ad0793a98bdb203fb3d247561216a560
2017-09-29 13:13:49 -04:00
David Keeler d26e95be10 bug 1257403 - don't bother verifying CA or email certificates when importing r=Cykesiopka
Incidentally, this means we can remove certificateUsageVerifyCA and
certificateUsageStatusResponder from CertVerifier, since we no longer use them.

MozReview-Commit-ID: Bbqn8fShfTm

--HG--
extra : rebase_source : 012cb08dcbe33fe889c9f6824959b1a02cd0bdc7
2017-09-22 15:42:20 -07:00
Sebastian Hengst 5e8bacff75 merge mozilla-central to mozilla-inbound. r=merge a=merge 2017-09-29 13:32:19 +02:00
Kai Engert 47d3b3ac0b Bug 730495, guarantee that sqlite3_config is called before any other SQLite function, r=asuth, r=froydnj, r=mak 2017-09-29 13:25:06 +02:00
Wes Kocher 134e495909 Merge m-c to autoland, a=merge
MozReview-Commit-ID: 6RdWW73Lc0A
2017-09-28 17:16:12 -07:00
Haik Aftandilian f39cc5cc25 Bug 1401756 - [Mac] Remove unneeded mach-lookups from plugin sandbox rules. r=Alex_Gaynor
MozReview-Commit-ID: JsgBzNJC4zF

--HG--
extra : rebase_source : deffeff5e6d39318c55bf3d487071139abaf3c92
2017-09-20 14:05:27 -07:00
David Parks 29d5db60ba Bug 1403707 - Change content sandbox job level to JOB_LOCKDOWN. r=bobowen
Changing definition of Windows content sandbox level 4 (the current Nightly default) to increase the job level from JOB_RESTRICTED to JOB_LOCKDOWN.
2017-09-27 13:36:06 -07:00
Mike Shal 9e6798ac00 Bug 1402012 - Update buildconfig.py to use PartialConfigEnvironment; r=glandium
By using the PartialConfigEnvironment, the clients of buildconfig will
depend on config.statusd/ files instead of config.status directly.
Clients can access substs and defines using buildconfig.substs['FOO'] or
buildconfig.defines['BAR'], and then collect file-level dependencies for
make using buildconfig.get_dependencies(). All GENERATED_FILES rules
already make use of this because file_generate.py automatically includes
these dependencies (along with all python modules loaded).

As a result of this commit, re-running configure will no longer cause
the world to be rebuilt. Although config.status is updated, no build
steps use config.status directly and instead depend on values in
config.statusd/, which are written with FileAvoidWrite. Since those
files are not official targets according to the make backend, make won't
try to continually rebuild the backend when those files are out of date.
And since they are FileAvoidWrite, make will only re-run dependent steps
if the actual configure value has changed.

As a result of using JSON to load data from the config.statusd
directory, substs can be unicode (instead of a bare string type).
generate_certdata.py converts the subst manually to a string so the
value can be exported to the environment without issue on Windows.

Additionally, patching the buildconfig.substs dict no longer works, so
the unit-symbolstore.py test was modified to patch the underlying
buildconfig.substs._dict instead.

The other files that needed to be modified make use of all the defines
for the preprocessor. Those that are used during 'mach build' now use
buildconfig.defines['ALLDEFINES'], which maps to a special
FileAvoidWrite file generated for the PartialConfigEnvironment.

MozReview-Commit-ID: 2pJ4s3TVeS8

--HG--
extra : rebase_source : d6bb0208483f9f043e7be1b36907ca13243985f8
2017-08-24 22:52:01 -04:00
Mark Goodwin ae55f5a197 Bug 1359428 - Remove preference to select OneCRL update mechanism r=keeler,leplatrem,rhelmer
MozReview-Commit-ID: A6CwZrIDmTn

--HG--
extra : rebase_source : 41e17d29f982d23f30f48a6f85ad20fc84b018c6
2017-09-29 10:47:27 +01:00
Sebastian Hengst 5a95ac34b4 merge mozilla-central to autoland. r=merge a=merge 2017-09-29 11:49:46 +02:00
ffxbld f54c1723be No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-09-27 10:38:25 -07:00
ffxbld 3a16ce743e No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-09-27 10:38:22 -07:00
Wes Kocher 9d9610f6a3 Merge m-c to autoland, a=merge
MozReview-Commit-ID: Kjjgw1Pdb3U
2017-09-26 17:15:46 -07:00
Wes Kocher 22a72df7fe Merge inbound to m-c a=merge
MozReview-Commit-ID: 6viJ4wRxLa8
2017-09-26 15:54:51 -07:00
Bob Owen 8cf423ff54 Bug 1403230: Block WRusr.dll in child processes when using Alternate Desktop. r=jimm 2017-09-26 19:23:39 +01:00
ffxbld 3dbb47302e No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update 2017-09-26 10:34:42 -07:00
ffxbld 00a87df5f6 No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update 2017-09-26 10:34:38 -07:00
Wes Kocher 3a1e5b73d3 Merge autoland to central, a=merge
MozReview-Commit-ID: 9UQPQrkhjsZ
2017-09-25 16:25:22 -07:00
ffxbld cf9c6529ef No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2017-09-25 10:41:00 -07:00
ffxbld 13d0d05c38 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2017-09-25 10:40:56 -07:00
Sebastian Hengst c0203b7b61 merge mozilla-inbound to mozilla-central. r=merge a=merge
MozReview-Commit-ID: HGJIeJkelZe
2017-09-24 23:52:35 +02:00
ffxbld f6dc0e40b5 No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-09-24 10:43:38 -07:00
ffxbld 9fb62f395f No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-09-24 10:43:34 -07:00
ffxbld 3d38c3ccc5 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2017-09-23 10:33:39 -07:00
ffxbld d4542c60a8 No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2017-09-23 10:33:35 -07:00
ffxbld c92594521f No bug, Automated HPKP preload list update from host bld-linux64-spot-360 - a=hpkp-update 2017-09-22 20:41:32 -07:00
ffxbld 8efdfac860 No bug, Automated HSTS preload list update from host bld-linux64-spot-360 - a=hsts-update 2017-09-22 20:41:29 -07:00
ffxbld 56ad02e34d No bug, Automated HPKP preload list update from host bld-linux64-spot-304 - a=hpkp-update 2017-09-22 10:34:18 -07:00
ffxbld fce8a1a7fd No bug, Automated HSTS preload list update from host bld-linux64-spot-304 - a=hsts-update 2017-09-22 10:34:14 -07:00
David Keeler 4c42c44c85 bug 1401796 - fix HSTS preload script to keep preexisting hosts if there was a connection error r=jcj DONTBUILD NPOTB
Bug 1255425 changed an 'of' to an 'in', which caused the code that would keep
preexisting entries on the preload list if there was a connection error to loop
over the indices in the array and not the values themselves. Thanks, JavaScript.

MozReview-Commit-ID: DvVWhpImp8n

--HG--
extra : rebase_source : 149c8d0fb46d3b71a9de19aaedfb5e0dd5b9a460
2017-09-25 11:00:21 -07:00
Chris Peterson 5698729243 Bug 870698 - Part 10: Replace Append(NS_LITERAL_STRING("")) with AppendLiteral(u""). r=erahm
The NS_LITERAL_STRING macro creates a temporary nsLiteralString to encapsulate the char16_t string literal and its length, but AssignLiteral() can determine the char16_t string literal's length at compile-time without nsLiteralString.

MozReview-Commit-ID: H9I6vNDMdIr

--HG--
extra : rebase_source : cf537a1f65af003c6c4f8919b925b0f305c1dd4d
extra : source : 13b89ce4e6a66c840f82a335c71f5a12938aba22
2017-09-07 18:32:54 -07:00
Chris Peterson a0c8081df4 Bug 870698 - Part 4: Replace Equals("") with EqualsLiteral(""). r=erahm
MozReview-Commit-ID: G1GhyvD29WK

--HG--
extra : rebase_source : 115842c37a40041bdca7b4e1ff0a5680b02ced15
extra : source : 90bfff9c01d80086cdc17637f310e898fea295ea
2017-09-06 01:13:45 -07:00
Chris Peterson 45aa2a8e8e Bug 870698 - Part 2: Replace Append("") with AppendLiteral(""). r=erahm
MozReview-Commit-ID: CrkIP4iHP1U

--HG--
extra : rebase_source : 5dc4e91a3f1860773c199f1abf3f66479218834a
extra : intermediate-source : ba51cc79847f2b43ba616f4a5d2bbc6958ca9f6d
extra : source : 1fda2fa990cc918c748ffa14fcc5dbe13fe3bdc3
2017-09-03 22:14:11 -07:00
Chris Peterson 9f4c1f5278 Bug 870698 - Part 1: Replace Assign("") with AssignLiteral(""). r=erahm
MozReview-Commit-ID: A0u9PP49OW3

--HG--
extra : rebase_source : 7d5286959f510eb4b7df1b7e32d5b9b58719c48b
extra : intermediate-source : f552b4a78236c42bc09030b3eb008725a3edb9c8
extra : source : 26ac4a1014f6661a70e3bf9f552407e12c2c3981
2017-09-03 22:12:56 -07:00
Alex Gaynor 79cf374320 Bug 1403210 - Remove unused access to AppleSNBFBUserClient iokit from content process; r=haik
MozReview-Commit-ID: K4Z48UFfq2w

--HG--
extra : rebase_source : 8664f3e04503ecc48813d45d26b5433afcc65251
2017-09-26 11:32:01 -04:00
Wes Kocher bedaaf0009 Merge autoland to central, a=merge
MozReview-Commit-ID: KNeXnxjnn5u
2017-09-21 16:29:32 -07:00
ffxbld ec671e96e6 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-09-21 10:46:13 -07:00
ffxbld 7ecdba9161 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-09-21 10:46:09 -07:00
Jed Davis d64e9b800d Bug 1396542 - Let sandboxed content processes read /var/lib/dbus/machine-id. r=gcp
PulseAudio is the only thing that's known to need this.  Note that the
same file often exists as /etc/machine-id, and we currently allow reading
all of /etc (which includes other fingerprinting hazards as well).

MozReview-Commit-ID: FoyKQzhAV6M

--HG--
extra : rebase_source : 593ee0b94cf507681a034d22cd06a9050d56b86a
2017-09-19 19:54:41 -06:00
Valentin Gosu 7822c999e1 Bug 910207 - Disable preconnect when user certificates are installed r=keeler
MozReview-Commit-ID: 1vGPxDCAcQR

--HG--
extra : rebase_source : 3dda6f50ddbe1e03c7b7625c6039cb20896ef05e
2017-09-19 01:51:41 +02:00
ffxbld 2ef8bd8a46 No bug, Automated HPKP preload list update from host bld-linux64-spot-306 - a=hpkp-update 2017-09-20 10:26:32 -07:00
ffxbld 0ca9f5fd6b No bug, Automated HSTS preload list update from host bld-linux64-spot-306 - a=hsts-update 2017-09-20 10:26:28 -07:00
Franziskus Kiefer 260bd8768a Bug 1386955 - land NSS_3_33_RTM, no code changes, only version numbers, UPGRADE_NSS_RELEASE, r=me
MozReview-Commit-ID: GjKGBcoghDh

--HG--
extra : amend_source : f33a891a76d22de7f9d6a985cf744523c9e7ed18
2017-09-20 09:10:07 +02:00
Wes Kocher 2d19ba5cc6 Merge autoland to central, a=merge
MozReview-Commit-ID: Eh11kawjrJB
2017-09-19 14:05:54 -07:00