Commit Graph

9681 Commits

Author SHA1 Message Date
Carsten "Tomcat" Book
da83a15284 Merge mozilla-central to fx-team 2015-07-08 12:04:53 +02:00
Steven Englehardt
73079800c9 Bug 1153010 - Disambiguate error messages for mixed content and weak/broken cipher. r=keeler,tanvi,dolske 2015-07-08 09:04:11 +02:00
Nicholas Nethercote
f976bf5495 Bug 1179071 - Merge RemovingIterator into Iterator. r=froydnj.
The original motivation for the Iterator/RemovingIterator split was that
PLDHashTable Checker class would treat them differently. But that didn't end up
happening (see bug 1131308). So this patch merges them. This is a small code
size win now but it will become bigger when I add iterators to nsTHashTable and
nsBaseHashtable.

The only complication is that PLDHashTable::Iter() is now non-const, which is
a problem if you use it in a const method. So I added PLDHashTable::ConstIter()
which is used in just two places. It's a bit of a hack -- effectively a
const_cast -- but I don't think it's too bad.
2015-07-06 22:02:26 -07:00
Dragana Damjanovic
7987d2203e Bug 905127 - Part 2 - remove unnecessary nsNetUtil.h includes r=jduell 2015-07-06 07:55:00 +02:00
Emanuel Hoogeveen
7d1e52f2ff Bug 905127 - Part 1 - Make some functions from nsNetUtil not inline. r=jduell 2015-07-07 04:17:00 +02:00
David Keeler
1743e82980 Backed out changeset 0e38e844e0af (bug 1178988) for breaking windows builds on a CLOSED TREE
--HG--
extra : amend_source : 0caf2e6472fbc72af4af4c1f7f20ffc83cef3c94
2015-07-06 16:24:25 -07:00
David Keeler
a6254fbeef Backed out changeset aeae195846c8 (bug 1178988) for breaking windows builds 2015-07-06 16:22:48 -07:00
David Keeler
30d8da9d4d bug 1178988 - convert test_ocsp_url to generate certificates at build time r=Cykesiopka
Also enable loading of certificates and private keys into GenerateOCSPResponse
2015-06-04 17:03:48 -07:00
David Keeler
9c80304730 bug 1178988 - refactor key-specific parts of pycert.py into pykey.py r=Cykesiopka,mgoodwin 2015-06-30 14:35:42 -07:00
Phil Ringnalda
2af297c249 Merge m-i to m-c, a=merge 2015-07-04 11:07:23 -07:00
ffxbld
0c3c374174 No bug, Automated HPKP preload list update from host bld-linux64-spot-384 - a=hpkp-update 2015-07-04 03:30:40 -07:00
ffxbld
857d30b804 No bug, Automated HSTS preload list update from host bld-linux64-spot-384 - a=hsts-update 2015-07-04 03:30:37 -07:00
Juan Gomez
258ad59e3f Bug 1171931 - Refactor duplicated code using XRE_IsParent/ContentProcess. r=froydnj 2015-07-03 18:29:00 -07:00
Cykesiopka
c61aa1392c Bug 1174389 - Add result strings to PSM OCSP xpcshell tests. r=keeler 2015-07-02 00:45:00 +02:00
Andrew Bartlett
8cdf1bf8c6 bug 496234 - add test vectors from RFC 1320 for md4 implementation r=mayhemer 2015-06-25 12:10:40 -07:00
David Keeler
8f50e96227 bug 496234 - fix md4 implementation by appending the input length as a 64-bit number r=mayhemer 2015-06-25 12:32:44 -07:00
David Keeler
ef236972ed bug 496234 - use stdint types in md4 implementation r=mayhemer
Also removes some trailing whitespace.
2015-06-25 12:00:49 -07:00
Nicholas Nethercote
22291d109e Bug 1175807 - Remove PL_DHashTableEnumerate() uses from nsNSSShutdown. r=honzab.
The doPK11Logout() change is straightforward.

In contrast, the loop in evaporateAllNSSResources() is *weird*. Nevertheless,
this change preserves its behaviour.

--HG--
extra : rebase_source : 702fdd9fcc03b888eed7eebdd78f4184b28a2886
2015-06-17 21:09:27 -07:00
Nathan Froyd
974d8120f2 Bug 1161627 - part 2 - machine-convert TemporaryRef<T> to already_AddRefed<T>; r=ehsan
This conversion was done with the script:

  find . -name '*.cpp' -o -name '*.h' -o -name '*.mm' -o -name '*.idl' | \
    egrep -v 'cairo-win32-refptr.h|RefPtr.h|TestRefPtr.cpp' | \
    xargs sed -i -e 's/mozilla::TemporaryRef</already_AddRefed</g' \
                 -e 's/TemporaryRef</already_AddRefed</g'

Manual fixups were performed in the following instances:

- We handled mfbt/RefPtr.h manually so as to not convert TemporaryRef itself
  into already_AddRefed.

- The following files had explicit Move() calls added to make up for the lack
  of a copy constructor on already_AddRefed:

  dom/base/ImageEncoder.cpp
  dom/media/MediaTaskQueue.{h,cpp}
  dom/media/webaudio/PannerNode.cpp

- A redundant overload for MediaTaskQueue::Dispatch was deleted.

- A few manual fixups were required in mfbt/tests/TestRefPtr.cpp.

- Comments, using declarations, and forward declarations relating to
  TemporaryRef in dom/canvas/ and gfx/layers/ were changed to refer to
  already_AddRefed.
2015-06-17 10:00:52 -04:00
Cykesiopka
777fd8a866 Bug 1145679 - Part 2 - Tests. r=keeler
--HG--
extra : rebase_source : ffbe58b27f8f7890b9d398127ab80f562d2dc8b0
2015-06-29 22:19:00 +02:00
Cykesiopka
0a9aea4ab2 Bug 1145679 - Reject EV status for end-entity EV certs with overly long validity periods. r=keeler
--HG--
extra : rebase_source : ec44bb566cce8ab14f740457d6ba1d863b39c256
2015-06-29 22:19:00 +02:00
David Keeler
e09f6209c4 bug 1174292 - convert test_cert_version.js to generate certificates at build time r=Cykesiopka
Also remove redundant test-cases.
2015-06-12 14:56:07 -07:00
Carsten "Tomcat" Book
90ccc67e4e merge mozilla-inbound to mozilla-central a=merge 2015-06-29 14:17:02 +02:00
ffxbld
117313c482 No bug, Automated HPKP preload list update from host bld-linux64-spot-098 - a=hpkp-update 2015-06-27 03:33:49 -07:00
ffxbld
7ee431527f No bug, Automated HSTS preload list update from host bld-linux64-spot-098 - a=hsts-update 2015-06-27 03:33:47 -07:00
Carsten "Tomcat" Book
87e3154dff merge mozilla-inbound to mozilla-central a=merge 2015-06-22 14:03:17 +02:00
Ryan VanderMeulen
2ff7670bf1 Bug 1029775 - Skip test_ocsp_stapling_expired.js on B2G debug for frequent intermittent failures.
--HG--
extra : rebase_source : 3eb53f648d6663ca0f3f1380eb8a81b66a491d1a
2015-06-21 21:22:08 -04:00
ffxbld
94d833221d No bug, Automated HPKP preload list update from host bld-linux64-spot-224 - a=hpkp-update 2015-06-20 03:33:00 -07:00
ffxbld
1a89ffacb7 No bug, Automated HSTS preload list update from host bld-linux64-spot-224 - a=hsts-update 2015-06-20 03:32:58 -07:00
Ryan VanderMeulen
42deb0e71d Bug 1176097 - Update NSS to NSS_3_19_2_RTM.
--HG--
extra : rebase_source : c668a4f77efd06e5914b69d06f5a2eab4233f9f3
2015-06-19 14:01:18 -04:00
Bob Owen
2e341f2ff1 Bug 1177594: Use a USER_RESTRICTED token level on GMP process when integrity levels are available. r=cpearce 2015-06-26 14:19:12 +01:00
Ryan VanderMeulen
5f5c327690 Backed out changeset 8b4e4083639e (bug 1171931) for B2G debug emulator bustage. 2015-06-25 19:48:42 -04:00
Bob Owen
cc27f74877 Bug 1172388: Use a USER_RESTRICTED access level token on Windows 10. r=cpearce 2015-06-19 23:35:43 +01:00
Jed Davis
1fb9a20a64 Bug 1176085 - Fix second/nanosecond confusion in Linux sandbox start error case. r=kang
--HG--
extra : amend_source : e546416d9c058305f4cb00d1c015daaec8ab1362
2015-06-19 14:26:44 -07:00
Juan Gomez
702a59d135 Bug 1171931 - Refactor duplicated code using XRE_IsParent/ContentProcess. r=froydnj
--HG--
extra : rebase_source : 2ecbe6c1dd8a7ad8dc529b53349ad431cf1116c9
2015-06-24 14:11:00 -04:00
Benoit Girard
8d6a67f6d3 Bug 1172216 - Move nsStackwalk to mozglue. r=glandium
--HG--
rename : xpcom/base/nsStackWalk.cpp => mozglue/misc/StackWalk.cpp
rename : xpcom/base/nsStackWalk.h => mozglue/misc/StackWalk.h
extra : commitid : EMbWGfjKvdq
extra : rebase_source : b7308eb569cc1a019d3b7a92aaff0de7a49b5682
2015-06-10 16:32:45 -04:00
Bob Owen
bef4807107 Bug 1165895: Add NPAPI sandbox rule for the crash server pipe and x64 Temp dir write access. r=bbondy 2015-06-18 12:01:38 +01:00
Masatoshi Kimura
e287cf641e Bug 1165549 - Update fallback whitelist. r=keeler 2015-06-17 20:52:33 +09:00
David Keeler
fdaeee62c1 bug 1173565 - convert test_pinning_dynamic.js to generate certificates at build time r=Cykesiopka
Also fixes up references to test_pinning_dynamic certificates in test_pinning_header_parsing.js
2015-06-09 10:35:47 -07:00
Cykesiopka
cfd306a839 Bug 1171820 - Convert test_bug483440.html mochitest to an xpcshell test. r=keeler
--HG--
rename : security/manager/ssl/tests/mochitest/bugs/test_bug483440.html => security/manager/ssl/tests/unit/test_certviewer_invalid_oids.js
rename : build/pgo/certs/bug483440-attack2b.ca => security/manager/ssl/tests/unit/test_certviewer_invalid_oids/bug483440-attack2b.pem
rename : build/pgo/certs/bug483440-attack7.ca => security/manager/ssl/tests/unit/test_certviewer_invalid_oids/bug483440-attack7.pem
rename : build/pgo/certs/bug483440-pk10oflo.ca => security/manager/ssl/tests/unit/test_certviewer_invalid_oids/bug483440-pk10oflo.pem
2015-06-13 00:51:00 +02:00
Birunthan Mohanathas
0544e6bf2c Bug 1164714 - Move netwerk/test/TestSTSParser.cpp into security/manager/ssl/tests/. r=keeler
--HG--
rename : netwerk/test/TestSTSParser.cpp => security/manager/ssl/tests/compiled/TestSTSParser.cpp
2015-06-14 21:37:12 -07:00
David Keeler
fe26522550 bug 1172615 - check for and return early in the case of authentication bypass in AuthCertificateHook r=mcmanus
--HG--
extra : amend_source : 305df6e1ea028333d3077653f3e3fc098f40dd3f
2015-06-08 13:18:23 -07:00
Jed Davis
8ac1db457e Bug 1168555 - Work around Nuwa not always being single-threaded when a normal content process is. r=kang 2015-06-10 13:38:00 -04:00
Kai Engert
4de03b092c Bug 1174102 - Update to NSS 3.19.2, landing NSS_3_19_2_BETA1, r=nss-confcall 2015-06-12 11:10:17 +02:00
Cykesiopka
c7d8bf951d Bug 1171819 - Convert test_cert_eku-*.js to generate certificates at build time. r=keeler
--HG--
extra : rebase_source : a683669da992833336c6aa03961b143d428ee0b7
2015-06-10 22:50:00 +02:00
Mike Perry
1c707fb2d0 Bug 629558 - Pref to make Intermediate Cert Store memory-only. r=keeler
--HG--
extra : rebase_source : 2678d1f74624fe1aa7db44053647a39fb8c8f8dc
2015-06-10 14:14:00 +02:00
Atul Kumar
246d750391 Bug 1136301 - Null check for mCert->slot added in destructorSafeDestroyNSSReference & MarkForPermDeletion. Formatting update in MarkForPermDeletion. r=keeler 2015-06-10 09:46:16 -07:00
David Keeler
d67edd7f93 bug 1170303 - treat malformed name information in certificates as a domain name mismatch r=Cykesiopka 2015-06-01 13:55:23 -07:00
David Keeler
9091a35bfb bug 1171557 - make test_cert_trust.js certs a bit more realistic r=mgoodwin
According to the Baseline Requirements, root certificates MUST NOT
have the extendedKeyUsage extension. The extension is optional for
intermediates and required for end-entity certificates. This change
modifies the test certificates so they're more in line with the BRs.
2015-06-03 15:37:38 -07:00
David Keeler
c3704cadb3 bug 1171557 - convert test_cert_trust.js to generate certificates at build time r=mgoodwin 2015-06-03 15:12:00 -07:00