Commit Graph

11967 Commits

Author SHA1 Message Date
Wes Kocher
a1eadef812 Merge m-c to autoland, a=merge
MozReview-Commit-ID: B7oWq7qfpJ0
2017-07-24 18:13:05 -07:00
Wes Kocher
2673406be5 Merge inbound to central, a=merge
MozReview-Commit-ID: 1oTeP8uycV2
2017-07-24 18:06:39 -07:00
ffxbld
ef646e1a27 No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2017-07-24 09:28:36 -07:00
ffxbld
fedef7afe3 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2017-07-24 09:28:32 -07:00
ffxbld
8040d0c385 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-07-23 09:19:42 -07:00
ffxbld
2374a8dca9 No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-07-23 09:19:39 -07:00
ffxbld
39bc5ffdf3 No bug, Automated HPKP preload list update from host bld-linux64-spot-388 - a=hpkp-update 2017-07-22 09:24:29 -07:00
ffxbld
f2b288f21a No bug, Automated HSTS preload list update from host bld-linux64-spot-388 - a=hsts-update 2017-07-22 09:24:26 -07:00
Sebastian Hengst
f16a7f8371 merge mozilla-inbound to mozilla-central. r=merge a=merge
MozReview-Commit-ID: 4EWdTlEncz7
2017-07-22 11:38:42 +02:00
Wes Kocher
d45eb771f0 Merge m-c to inbound, a=merge
MozReview-Commit-ID: Ah48RzFU8Mt
2017-07-21 18:20:46 -07:00
ffxbld
fe79f566df No bug, Automated HPKP preload list update from host bld-linux64-spot-309 - a=hpkp-update 2017-07-21 09:18:15 -07:00
ffxbld
9681568945 No bug, Automated HSTS preload list update from host bld-linux64-spot-309 - a=hsts-update 2017-07-21 09:18:11 -07:00
Sebastian Hengst
367f0ac5a2 merge mozilla-inbound to mozilla-central. r=merge a=merge
MozReview-Commit-ID: IWRTFZdtzaE
2017-07-21 12:56:44 +02:00
ffxbld
6aae95fab2 No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update 2017-07-20 09:22:20 -07:00
ffxbld
eaa9f8ab1b No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update 2017-07-20 09:22:17 -07:00
Wes Kocher
61354cf6c0 Merge m-c to autoland, a=merge CLOSED TREE
MozReview-Commit-ID: 9pPsy8McMun
2017-07-21 18:18:35 -07:00
Sylvestre Ledru
7c0ae251cd Bug 1381253 - Remove redundant control flow declarations rs=ehsan
MozReview-Commit-ID: FFxP4aMCbOL

--HG--
extra : amend_source : 3aec108430b11048f47ffe19d5da7ac5034770a9
2017-07-15 19:03:04 +02:00
Sylvestre Ledru
6202d4908b Bug 1383007 - Move the declaration in the #ifdef declaration to silent a warning r=jld
Otherwise, a warning is triggered because the statement will never be executed [-

Found with -Wswitch-unreachable with gcc 7

MozReview-Commit-ID: FVStzyFlhJp

--HG--
extra : rebase_source : 1db87153c3e7dcde8d5a9e0f1f0ff607307c9ca2
2017-07-21 23:28:47 +02:00
Carsten "Tomcat" Book
2023b2d8e5 Merge mozilla-central to inbound 2017-07-24 14:59:06 +02:00
Franziskus Kiefer
84cdbc91a3 Bug 1370890 - land NSS f212be04f3d0 UPGRADE_NSS_RELEASE, r=me
--HG--
extra : rebase_source : 82c0c1e7b6487693fb0ace15edb374f95a9c0208
2017-07-24 10:12:57 +02:00
Kate McKinley
a85cfefb59 Bug 1380872 remove EV treatment for "China Internet Network Information Center EV Certificates Root" r=keeler
Disable EV treatment in preparation for removing the CNNIC root certificates
from NSS.

MozReview-Commit-ID: Anz1vXqABUM

--HG--
extra : rebase_source : 694d8321b9f5994fe57e81cb3169681c5e491910
2017-07-18 11:18:47 -07:00
Kate McKinley
67464ef73c Bug 1380821 remove EV treatment for UTN-USERFirst-Hardware r=keeler
The CA, Comodo, has requested that we remove the UTN-USERFirst-Hardware
root certificate from NSS. First remove EV treatment.

MozReview-Commit-ID: 8OTsevYOuKq

--HG--
extra : rebase_source : aabb219bcbee1c667bae29df618449df4b50d548
2017-07-18 11:28:26 -07:00
Wes Kocher
56c014ca6b Merge autoland to central, a=merge CLOSED TREE
MozReview-Commit-ID: 9RON7kHON0g
2017-07-19 16:32:03 -07:00
ffxbld
3a3af33f51 No bug, Automated HPKP preload list update from host bld-linux64-spot-302 - a=hpkp-update 2017-07-19 09:22:45 -07:00
ffxbld
5005f0245a No bug, Automated HSTS preload list update from host bld-linux64-spot-302 - a=hsts-update 2017-07-19 09:22:42 -07:00
Jed Davis
4634e2a332 Bug 1376910 - Unshare the SysV IPC namespace in content processes. r=gcp
MozReview-Commit-ID: 1Uajj68rEuC

--HG--
extra : rebase_source : 5a6c86a104911146cfb56243dec8016fca536dc3
2017-06-28 07:11:55 -07:00
Jed Davis
99611dd25e Bug 1376910 - Block syscalls for SysV IPC in content processes. r=gcp
MozReview-Commit-ID: 9XCYBU07T29

--HG--
extra : rebase_source : 2390164a217a71f1ac0a9102e8a023c07b15eee7
2017-06-28 06:33:53 -07:00
Nicholas Nethercote
ff8375cf2e Bug 1382099 - Remove MOZ_WIDGET_GONK from security/. r=jld.
--HG--
extra : rebase_source : 8027baf7a24e5e0d91a175ab38614594c143767b
2017-07-21 10:45:42 +10:00
Sebastian Hengst
303141cf04 merge mozilla-central to mozilla-inbound. r=merge a=merge 2017-07-20 11:02:11 +02:00
Bob Owen
b4239707cf Bug 1366694 Part 2: Don't run sandbox file system test in DEBUG on Windows. r=jimm
This is because in DEBUG mode we currently give full access to TEMP dir
for logging purposes and the temporary profile is created in the TEMP dir.
2017-07-20 07:50:48 +01:00
Bob Owen
dc46549cd6 Bug 1366694 Part 1: Allow user handles in the content process job in DEBUG builds. r=jimm 2017-07-07 15:51:17 +01:00
Haik Aftandilian
ef16b0fcf8 Bug 1380690 - Part 2 - Whitelist repo and object dirs using paths from the Info.plist files. r=Alex_Gaynor,spohl
On Mac developer builds, read the repo path and object dir path from the
Info.plist files in the application bundle instead of the
MOZ_DEVELOPER_REPO_DIR and MOZ_DEVELOPER_OBJ_DIR environment variables.

MozReview-Commit-ID: 8UtjkNPGUM1

--HG--
extra : rebase_source : 3e4ce32f2e2c40f8d899bc9190e48298081458d9
2017-07-19 09:16:09 -07:00
Alex Gaynor
2e4ea0b3cd Bug 1383818 - Disallow content processes for using the com.apple.ocspd mach service; r=haik
It is not used, so this is an attack surface reduction.

MozReview-Commit-ID: mrW9hi0SAh

--HG--
extra : rebase_source : 889b937cfd20680bbb62391fa7932b5cd2e1fd6a
2017-07-24 09:50:32 -04:00
Jed Davis
0de50c4f7c Bug 1376653 - Fix handling of architecture differences for getdents. r=gcp
MozReview-Commit-ID: ArGStWwkJAg

--HG--
extra : rebase_source : 27f97df93bff744607e60bf61c8b71431861b025
2017-07-11 17:03:06 -06:00
Jed Davis
bbcc5a0f24 Bug 1376653 - Unconditionalize the tkill() polyfill. r=gcp
MozReview-Commit-ID: JzLWCRQ9Keg

--HG--
extra : rebase_source : ff038fd9e1a4ec8047c3a00619a97464778d7c2a
2017-07-11 16:59:48 -06:00
Jed Davis
89b65b175e Bug 1376653 - Loosen restrictions on clone flags for musl. r=gcp
I've made this non-ifdef'ed, and removed currently unused ifdef'ed cases
for old Android versions, because I'd rather have less code that we're
not even compile-testing than save a few cycles on a non-critical path.

MozReview-Commit-ID: B4Wn1elyK4f

--HG--
extra : rebase_source : f12ef40b325432a6aafe961095e5af64fc5a1a9a
2017-07-11 14:23:27 -06:00
ffxbld
a83a4b6897 No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2017-07-18 09:16:36 -07:00
ffxbld
1a42bbc6f4 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2017-07-18 09:16:33 -07:00
Wes Kocher
d041a8f1e1 Merge m-c to inbound, a=merge
MozReview-Commit-ID: EAJy9kHnb32
2017-07-17 17:36:04 -07:00
ffxbld
88180977d7 No bug, Automated HPKP preload list update from host bld-linux64-spot-303 - a=hpkp-update 2017-07-17 09:25:02 -07:00
ffxbld
b825b8fa10 No bug, Automated HSTS preload list update from host bld-linux64-spot-303 - a=hsts-update 2017-07-17 09:24:59 -07:00
ffxbld
01d27fdd39 No bug, Automated HPKP preload list update from host bld-linux64-spot-388 - a=hpkp-update 2017-07-16 09:18:06 -07:00
ffxbld
665614ab12 No bug, Automated HSTS preload list update from host bld-linux64-spot-388 - a=hsts-update 2017-07-16 09:18:03 -07:00
ffxbld
80e4a08fd4 No bug, Automated HPKP preload list update from host bld-linux64-spot-301 - a=hpkp-update 2017-07-15 09:28:04 -07:00
ffxbld
b1e5771d96 No bug, Automated HSTS preload list update from host bld-linux64-spot-301 - a=hsts-update 2017-07-15 09:28:01 -07:00
Wes Kocher
ee45f814bb Merge m-c to autoland, a=merge
MozReview-Commit-ID: GOb2bgdUd36
2017-07-14 17:27:36 -07:00
Haik Aftandilian
88b1e4c7ca Bug 1380132 - Part 3 - Use env variable MOZ_DEVELOPER_OBJ_DIR to whitelist object dir in content sandbox. r=Alex_Gaynor
On developer builds, use $MOZ_DEVELOPER_OBJ_DIR to whitelist the object dir in the content sandbox so that symlinks to the object dir from .app/ files can be loaded.

MozReview-Commit-ID: J4YdpxgbD8i

--HG--
extra : rebase_source : 19e369fe9ae29418d9d79e1fb83246474d858f34
2017-07-14 16:32:53 -07:00
Ryan VanderMeulen
418fe0e50f Merge m-c to inbound. a=merge 2017-07-14 12:46:40 -04:00
ffxbld
63892fd487 No bug, Automated HPKP preload list update from host bld-linux64-spot-308 - a=hpkp-update 2017-07-14 09:41:09 -07:00
ffxbld
a7fbfe86b2 No bug, Automated HSTS preload list update from host bld-linux64-spot-308 - a=hsts-update 2017-07-14 09:41:06 -07:00