b5b443ea9c
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=jcristau
...
Differential Revision: https://phabricator.services.mozilla.com/D110808
2021-04-06 08:12:18 +00:00
d68661e2cc
Backed out 24 changesets (bug 1682030) for bustage on ProcessHangMonitor.cpp and nsCOMPtr.h. CLOSED TREE
...
Backed out changeset 5b1644096477 (bug 1682030)
Backed out changeset 35ae60eea3c7 (bug 1682030)
Backed out changeset 3eca76a6d639 (bug 1682030)
Backed out changeset 259c45447ad9 (bug 1682030)
Backed out changeset de9222dc8c31 (bug 1682030)
Backed out changeset 2986c7e14349 (bug 1682030)
Backed out changeset 6af3410bdb93 (bug 1682030)
Backed out changeset 42b0621c2927 (bug 1682030)
Backed out changeset 366e3e371858 (bug 1682030)
Backed out changeset 9adb2865adea (bug 1682030)
Backed out changeset 6af6af3bc03a (bug 1682030)
Backed out changeset da94a91b35ae (bug 1682030)
Backed out changeset 9143da258d0e (bug 1682030)
Backed out changeset 5e20d06952ba (bug 1682030)
Backed out changeset 6253d7e1ce7d (bug 1682030)
Backed out changeset 0e06ddeea3e2 (bug 1682030)
Backed out changeset 9c58d57c9e44 (bug 1682030)
Backed out changeset e90edd89430e (bug 1682030)
Backed out changeset 5861b8166b10 (bug 1682030)
Backed out changeset b4b88cdc7993 (bug 1682030)
Backed out changeset b80054e9805c (bug 1682030)
Backed out changeset 580d857674c0 (bug 1682030)
Backed out changeset a9cdf93c2662 (bug 1682030)
Backed out changeset 9c9c8b4998e2 (bug 1682030)
2021-04-06 03:54:12 +03:00
3f9c44a9ed
Bug 1682030 - Remove NPAPI plugin process from GeckoChildProcess r=jld,gsvelto
...
Eliminates the NPAPI plugin process type from the GeckoChildProcess enum as part of NPAPI removal. In order to avoid altering enum values when updating the process list, the GECKO_PROCESS_TYPE macro has been updated to include the desired enum value. We want to resist altering the values as they need to be consistent e.g. in telemetry reports.
We also remove plugins from adjacent spots that need to maintain consistency with GeckoChildProcess -- most notably the nsICrashService.
Differential Revision: https://phabricator.services.mozilla.com/D108689
2021-04-05 23:48:43 +00:00
4e9ed60079
Bug 1682030 - Remove Windows NPAPI plugin proccess sandbox r=bobowen
...
Removes Windows NPAPI process sandboxing code, including the code to establish a viable temp directory that was accessible by the sandboxed process.
Differential Revision: https://phabricator.services.mozilla.com/D108688
2021-04-05 23:48:43 +00:00
374e68294d
Bug 1701460 - Remove expired Telemetry probe security.client_cert r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D110496
2021-04-01 20:53:39 +00:00
b9c33eddf7
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D110552
2021-04-01 14:55:53 +00:00
7ffcf86c64
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D110105
2021-03-29 15:01:12 +00:00
57e9f18c25
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D109733
2021-03-25 14:56:34 +00:00
a598a0c7c5
Bug 1679522 - Use <> style for including windows system headers. r=andi
...
Differential Revision: https://phabricator.services.mozilla.com/D98895
2021-03-25 10:19:44 +00:00
760cc7e936
Bug 1679522 - Fix include directives and forward declarations. r=andi,necko-reviewers,jgilbert
...
- Add missing include directives and forward declarations.
- Remove some extra include directives.
- Add missing namespace qualifications.
- Move include directives out of namespace in toolkit/xre/GlobalSemaphore.h
Differential Revision: https://phabricator.services.mozilla.com/D98894
2021-03-25 10:19:44 +00:00
f6cb811758
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=jcristau
...
Differential Revision: https://phabricator.services.mozilla.com/D109355
2021-03-22 14:58:39 +00:00
a2a7769992
Bug 1689726 - avoid using NSS types in TrustOverrideUtils.h r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D106888
2021-03-19 17:29:12 +00:00
6ae9169f08
Bug 1698098 - Make use of nsBaseHashtable::Clone. r=xpcom-reviewers,mccr8
...
Differential Revision: https://phabricator.services.mozilla.com/D107617
2021-03-19 09:01:46 +00:00
8d848a2cbe
Bug 1694020 - land NSS NSS_3_63_RTM UPGRADE_NSS_RELEASE, r=beurdouche
...
Differential Revision: https://phabricator.services.mozilla.com/D108957
2021-03-19 05:28:36 +00:00
10763f5ccf
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D108949
2021-03-18 14:52:53 +00:00
ae4514b7a8
Bug 1665786 - browser_certificateManager.js should wait for the next refresh driver tick instead of relying on the implicit initial waitForCondition timer to wait for strings to be localized, r=keeler.
...
Differential Revision: https://phabricator.services.mozilla.com/D108515
2021-03-17 17:39:35 +00:00
9420f7a7a8
Bug 1697863 - Use native menulist styling on some dialogs. r=harry
...
Differential Revision: https://phabricator.services.mozilla.com/D108101
2021-03-17 17:15:10 +00:00
b9621d6376
Bug 1695162 - Use range-based for instead of custom hashtable iterators. r=xpcom-reviewers,kmag
...
Differential Revision: https://phabricator.services.mozilla.com/D108585
2021-03-17 15:49:46 +00:00
4e97659d91
Backed out 2 changesets (bug 1697863) for valgrind failures. CLOSED TREE
...
Backed out changeset f82846b236e3 (bug 1697863)
Backed out changeset 64166dc7f85f (bug 1697863)
2021-03-17 01:15:11 +02:00
30507b25b5
Bug 1697863 - Use native menulist styling on some dialogs. r=harry
...
Differential Revision: https://phabricator.services.mozilla.com/D108101
2021-03-16 17:11:23 +00:00
b6c0f67943
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D108456
2021-03-15 14:52:33 +00:00
8262eb0e29
Bug 1690921 - Detect socket syscalls only once per process when building Linux sandbox policies. r=gcp
...
The function to detect whether the kernel has separate syscalls for
socket operations (rather than only `socketcall`) had a comment that
it's called only once, which is no longer true. So, this seems like a
good time to add a cache (but not on newer archs like `x86_64` where the
answer is constant).
This patch also removes the ifdefs on `__NR_socket`, because all archs
have it now, and our local headers will define it even if the build
host's headers don't.
Differential Revision: https://phabricator.services.mozilla.com/D105853
2021-03-12 21:12:11 +00:00
2d6db34852
Bug 1690921 - Limit IPC `sendmsg` gather list sizes based on socket buffer capacity. r=mccr8,gcp
...
When setting up calls to `sendmsg` for IPC on Unix systems, we generate
`iovec`s for the entire message or until the `IOV_MAX` limit is reached,
whichever comes first. However, messages can be very large (up to 256
MiB currently), while the OS socket buffer is relatively small (8KiB on
macOS and FreeBSD, ~200KiB on Linux).
This patch detects the socket buffer size with the `SO_SNDBUF` socket
option and cuts off the `iovec` array after it's reached; it also adjusts
the Linux sandbox policy to allow reading that value in all processes.
On my test machines this increases throughput on large messages by about
2.5x on macOS (from ~0.3 to ~0.7 GB/s), but on Linux the improvement is
only about 5% (most of the running time is spent elsewhere).
Differential Revision: https://phabricator.services.mozilla.com/D105852
2021-03-12 21:12:10 +00:00
7d2448b7d5
Bug 1641178 - Add NSSCipherStrategy. r=dom-workers-and-storage-reviewers,jcj,janv
...
Differential Revision: https://phabricator.services.mozilla.com/D73290
2021-03-12 09:31:57 +00:00
d2b2c7b5e6
Bug 1697847 - Update crossbeam-utils in the tree. r=firefox-build-system-reviewers,mhentges,sheehan
...
We're already vendoring 0.8 so no reason not to do this. We're still
held back by an ancient tokio version, which I filed bug 1697845 for.
There are no breaking changes that affect any of our internal consumers.
Differential Revision: https://phabricator.services.mozilla.com/D108046
2021-03-11 18:15:44 +00:00
7a166f31cf
No Bug, mozilla-central repo-update HSTS HPKP remote-settings - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D108027
2021-03-11 15:02:46 +00:00
4920407bb3
Bug 1696845 - Use dlsym for gdk_*_display_get_type. r=stransky
...
Using `dlsym` for `gdk_wayland_display_get_type` is a cleaner solution
to bug 1696319, allowing running with a GTK that lacks the Wayland
backend.
Also adds a symmetric implementation for `gdk_x11_display_get_type`,
which should help running without X11.
Differential Revision: https://phabricator.services.mozilla.com/D107406
2021-03-11 14:32:53 +00:00
f8d14645f7
Bug 1694020 - land NSS 61e70233f80e UPGRADE_NSS_RELEASE, r=beurdouche
...
2021-03-10 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* cmd/bltest/blapitest.c, lib/freebl/blapi.h,
lib/freebl/chacha20poly1305-ppc.c, lib/freebl/chacha20poly1305.c,
lib/freebl/loader.c:
Bug 1613235 - Clang-format for: POWER ChaCha20 stream cipher vector
acceleration r=beurdouche
Depends on D107221
[61e70233f80e] [tip]
2021-03-10 aoeu <aoeuh@yandex.ru>
* cmd/bltest/blapitest.c, lib/freebl/blapi.h, lib/freebl/blapit.h,
lib/freebl/chacha20poly1305.c, lib/freebl/chacha20poly1305.h,
lib/freebl/ldvector.c, lib/freebl/loader.c, lib/freebl/loader.h:
Bug 1613235 - Add POWER ChaCha20 stream cipher vector acceleration.
r=bbeurdouche
Depends on D107220
[4f7ba08bd991]
* lib/freebl/Makefile, lib/freebl/chacha20-ppc64le.S,
lib/freebl/chacha20poly1305-ppc.c, lib/freebl/chacha20poly1305.c,
lib/freebl/freebl.gyp, lib/freebl/freebl_base.gypi:
Bug 1613235 - Add POWER ChaCha20 stream cipher vector acceleration.
r=bbeurdouche
[764124fddaa2]
2021-03-10 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* lib/freebl/ecl/ecp_secp384r1.c, lib/freebl/ecl/ecp_secp521r1.c:
Bug 1697380 - Make a clang-format run on top of helpful
contributions. r=beurdouche
Depends on D106881
[8a9174a78207]
* lib/freebl/ecl/ecp_secp384r1.c:
Bug 1683520 - ECCKiila P384, change syntax of nested structs
initialization to prevent build isses with GCC 4.8. r=bbrumley
Depends on D102389
[150cbb169f1e]
2021-03-10 Billy Brumley <bbrumley@gmail.com>
* lib/freebl/ecl/ecp_secp384r1.c:
Bug 1683520 - [lib/freebl/ecl] P-384: allow zero scalars in dual
scalar multiplication r=bbeurdouche
[76aca2d944ae]
2021-03-10 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* lib/freebl/ecl/ecp_secp521r1.c:
Bug 1683520 - ECCKiila P521, change syntax of nested structs
initialization to prevent build isses with GCC 4.8. r=bbrumley
Depends on D102406
[5e7affa3ce43]
2021-03-10 Billy Brumley <bbrumley@gmail.com>
* lib/freebl/ecl/ecp_secp521r1.c:
Bug 1683520 - [lib/freebl/ecl] P-521: allow zero scalars in dual
scalar multiplication r=bbeurdouche
[a8f4918cd546]
2021-03-08 Benjamin Beurdouche <bbeurdouche@mozilla.com>
* automation/taskcluster/scripts/run_hacl.sh,
lib/freebl/verified/Hacl_Bignum25519_51.h,
lib/freebl/verified/Hacl_Chacha20.c,
lib/freebl/verified/Hacl_Chacha20.h,
lib/freebl/verified/Hacl_Chacha20Poly1305_128.c,
lib/freebl/verified/Hacl_Chacha20Poly1305_128.h,
lib/freebl/verified/Hacl_Chacha20Poly1305_256.c,
lib/freebl/verified/Hacl_Chacha20Poly1305_256.h,
lib/freebl/verified/Hacl_Chacha20Poly1305_32.c,
lib/freebl/verified/Hacl_Chacha20Poly1305_32.h,
lib/freebl/verified/Hacl_Chacha20_Vec128.c,
lib/freebl/verified/Hacl_Chacha20_Vec128.h,
lib/freebl/verified/Hacl_Chacha20_Vec256.c,
lib/freebl/verified/Hacl_Chacha20_Vec256.h,
lib/freebl/verified/Hacl_Curve25519_51.c,
lib/freebl/verified/Hacl_Curve25519_51.h,
lib/freebl/verified/Hacl_Kremlib.h,
lib/freebl/verified/Hacl_Poly1305_128.c,
lib/freebl/verified/Hacl_Poly1305_128.h,
lib/freebl/verified/Hacl_Poly1305_256.c,
lib/freebl/verified/Hacl_Poly1305_256.h,
lib/freebl/verified/Hacl_Poly1305_32.c,
lib/freebl/verified/Hacl_Poly1305_32.h,
lib/freebl/verified/kremlin/include/kremlin/internal/target.h,
lib/freebl/verified/kremlin/include/kremlin/internal/types.h,
lib/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt128.h, li
b/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt128_Verifie
d.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/FStar_UInt_8_1
6_32_64.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/LowStar_
Endianness.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/fstar
_uint128_gcc64.h, lib/freebl/verified/kremlin/kremlib/dist/minimal/f
star_uint128_msvc.h, lib/freebl/verified/libintvector.h:
Bug 1696800 - HACL* update March 2021 -
c95ab70fcb2bc21025d8845281bc4bc8987ca683 r=beurdouche
[3a85b452dbfa]
Differential Revision: https://phabricator.services.mozilla.com/D107995
2021-03-11 11:59:55 +00:00
208b2f5229
Backed out changeset 4f957141bf5f (bug 1689726) for GTest failures in psm_TrustOverrideTest.CheckCertDNIsInList. CLOSED TREE
2021-03-11 03:51:08 +02:00
1b3fa7a521
Bug 1689726 - avoid using NSS types in TrustOverrideUtils.h r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D106888
2021-03-11 00:07:30 +00:00
c7fc3894ed
Bug 1694450 - Return Error(ENOSYS) for unsupported madvise args in the GMP process. r=jld
...
Because Widevine may probe madvise using advice arguments we do not currently
support, including invalid arguments, this patch changes the handling of these
args so we will not crash in nightly.
Differential Revision: https://phabricator.services.mozilla.com/D106537
2021-03-10 20:58:44 +00:00
69dcaa6539
Bug 1694542 - cache intermediate certificates on the socket thread when it is idle r=mbirghan,rmf
...
Firefox sometimes caches intermediate certificates from verified connections in
case they are useful in the future. This operation involves modifying the NSS
cert database, and so should only be done on the socket thread (ideally when it
is idle).
Differential Revision: https://phabricator.services.mozilla.com/D106230
2021-03-10 17:09:03 +00:00
ad01a10a3b
Bug 1634281 - Use nsTHashMap instead of nsDataHashtable. r=xpcom-reviewers,necko-reviewers,jgilbert,nika,valentin
...
Note that this patch only transforms the use of the nsDataHashtable type alias
to a directly equivalent use of nsTHashMap. It does not change the specification
of the hash key type to make use of the key class deduction that nsTHashMap
allows for in some cases. That can be done in a separate step, but requires more
attention.
Differential Revision: https://phabricator.services.mozilla.com/D106008
2021-03-10 10:47:47 +00:00
eefee48405
Bug 1693541 - Improve uses of nsBaseHashtable and descendants and avoid multiple subsequent lookups in security/sandbox/linux/broker. r=jld
...
Differential Revision: https://phabricator.services.mozilla.com/D106116
2021-03-10 10:37:05 +00:00
198358fc15
Backed out changeset a4f4f640eaa7 (bug 1696845) for bustages on pangofc-fontmap.h
2021-03-10 04:49:51 +02:00
1261a74d17
Bug 1696845 - Use dlsym for gdk_*_display_get_type. r=stransky
...
Using `dlsym` for `gdk_wayland_display_get_type` is a cleaner solution
to bug 1696319, allowing running with a GTK that lacks the Wayland
backend.
Also adds a symmetric implementation for `gdk_x11_display_get_type`,
which should help running without X11.
Differential Revision: https://phabricator.services.mozilla.com/D107406
2021-03-09 22:55:47 +00:00
0066fab260
Bug 1570460: Add fonts path and named pipe creation to windows content process sandbox policy. r=handyman
...
These are needed for USER_LOCKDOWN access token level and untrusted integrity.
Differential Revision: https://phabricator.services.mozilla.com/D107464
2021-03-09 08:34:07 +00:00
ea7fdcc0e8
Bug 1683761 - Enable EV Treatment for AC RAIZ FNMT-RCM SERVIDORES SEGUROS root certificate. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D104701
2021-03-08 15:01:09 +00:00
082221c65a
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=RyanVM
...
Differential Revision: https://phabricator.services.mozilla.com/D107469
2021-03-08 14:53:46 +00:00
9bf82ef9c0
Bug 1693175 - Enable EV Treatment for GlobalSign E46 and R46 root certificates. r=mbirghan,keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D106087
2021-03-08 07:43:56 +00:00
590564d9d4
Bug 1694020 - land NSS 38a91427d65fffd0d7f7d2b6d0bcee7dc8b77a37 UPGRADE_NSS_RELEASE, r=beurdouche
...
Differential Revision: https://phabricator.services.mozilla.com/D107084
2021-03-08 07:43:55 +00:00
0b601b7d20
Bug 1686856 - Remove GeoTrust PCA-G2 and VeriSign Universal root certs from TrustOverride-SymantecData.inc. r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D105480
2021-03-08 07:43:55 +00:00
f153ff93e4
Bug 1695332 - Update test_cert_isBuiltInRoot/isBuiltInRoot_reload.js r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D106719
2021-03-08 07:43:54 +00:00
53e685af65
No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - a=repo-update r=jcristau
...
Differential Revision: https://phabricator.services.mozilla.com/D107218
2021-03-04 15:07:19 +00:00
9c2c4d3a52
Bug 1685883 - building with --disable-marionette fails with compile error r=keeler,whimboo,smaug
...
building firefox 84.0.2 from source (https://archive.mozilla.org/pub/firefox/releases/84.0.2/source/ ) fails when using `ac_add_options --disable-marionette` because of missing header
Differential Revision: https://phabricator.services.mozilla.com/D101390
2021-03-04 11:56:54 +00:00
043c0bbe2d
Backed out changeset 40a2cb2f242b (bug 1694020) on request from beurdouche, UPGRADE_NSS_RELEASE CLOSED TREE
2021-03-03 20:41:33 +02:00
dd75eb4204
Bug 1694020 - land NSS 38a91427d65fffd0d7f7d2b6d0bcee7dc8b77a37 UPGRADE_NSS_RELEASE, r=beurdouche
...
Differential Revision: https://phabricator.services.mozilla.com/D107084
2021-03-03 17:24:10 +00:00
dd5945e932
Bug 1617369 - Reformat recent rust changes with rustfmt r=emilio
...
Updated with rustfmt 1.4.18-stable (8157a3f 2020-07-15)
# ignore-this-changeset
Differential Revision: https://phabricator.services.mozilla.com/D106921
2021-03-02 15:35:36 +00:00
2b35c2ae19
Bug 1694464 - The osclientcert thread should have a name r=keeler
...
Differential Revision: https://phabricator.services.mozilla.com/D106289
2021-03-02 11:42:38 +00:00
0c7fa78a68
Bug 1681683 - Exclude OCSP channels from using TRR in mode3 r=necko-reviewers,kershaw
...
Otherwise the OCSP channel that tries to check the certificate for the DoH
server will also try to use TRR leading to DNS failures.
Differential Revision: https://phabricator.services.mozilla.com/D106884
2021-03-02 10:41:55 +00:00
ffxbld
Csoregi Natalia
David Parks
Hamza Mahfooz
Simon Giesecke
Moritz Birghan
Benjamin Beurdouche
Florian Quèze
Mike Conley
Jed Davis
Emilio Cobos Álvarez
Jan Alexander Steffens (heftig)
Brindusan Cristian
Bryce Seager van Dyk
Dana Keeler
Narcis Beleuzu
Bob Owen
Benjamin Beurdouche
Horst
Butkovits Atila
Sylvestre Ledru
R. Martinho Fernandes
Valentin Gosu