Commit Graph

10698 Commits

Author SHA1 Message Date
Cykesiopka
85719262d5 Bug 332442 - Keep track of and delete imported certs in head.js instead of in various test files. r=mgoodwin
head.js is run/included for every test file in the same folder, so having it
keep track of and clean up imported certs reduces the amount of duplication.

MozReview-Commit-ID: 23482qadMiy

--HG--
extra : rebase_source : deb673e9f21a0a9038b58d76c4c69f6a41ab4520
2016-10-10 16:08:36 +08:00
Cykesiopka
a5b764f858 Bug 495357 - Update some documentation concerning SaveIntermediateCerts(). r=kaie,me
Original patch by Wan-Teh Chang.

MozReview-Commit-ID: 3ElvC7DanYJ
2016-10-11 19:39:00 +02:00
Cykesiopka
05531e0517 Bug 1017616 - Filter out some more unnecessary characters when exporting certs. r=keeler
MozReview-Commit-ID: 2dHJTo3xusc

--HG--
extra : amend_source : a9c7ec2c1085e87bc850e7afaa08c96c0583f5fc
2016-10-11 10:17:57 -07:00
Franziskus Kiefer
201d720b45 Bug 1305970 - land NSS 0x295feaebef58, r=me
--HG--
extra : rebase_source : 79639bc9a11c6b1cb6bef1fc43d9e32f07be3f92
2016-10-11 14:33:41 +02:00
Haik Aftandilian
871aa1294d Bug 1307573 - Remove unused system.sb mach-lookups from OS X content sandbox; r=jimm
MozReview-Commit-ID: JDnLDbYs2IV

--HG--
extra : rebase_source : cba1eb50169fdb6d50ad8c900c98c8855cc71793
2016-10-03 17:11:01 -07:00
Gian-Carlo Pascutto
f0dece11a4 Bug 1308564 - Tie logging to MOZ_SANDBOX_VERBOSE instead of DEBUG. r=jld
MozReview-Commit-ID: JHIzIvbjA0Q

--HG--
extra : rebase_source : bb5652209a3fdb9e5cccb6c3cc4058fd74173fd1
2016-10-07 21:33:12 +02:00
Gian-Carlo Pascutto
f255eedb86 Bug 1308851 - Open up devices for NVIDIA proprietary driver in the sandbox. r=jld
MozReview-Commit-ID: 5OMRNSPBbe1

--HG--
extra : rebase_source : bb554a1f72a9e6bbde9250542989f5c34dfe7267
2016-10-10 20:51:21 +02:00
Cykesiopka
275d94abd0 Bug 1296317 - Stop calling PR_SetError() in VerifyCert() and VerifySSLServerCert(). r=keeler
The PR_SetError() + PR_GetError() pattern currently used is error prone and
unnecessary. The functions involved can instead return mozilla::pkix::Result,
which is equally expressive and more robust.

MozReview-Commit-ID: Hkd39eqTvds

--HG--
extra : rebase_source : f09e37c6a3a930c30cce003139df86bc84d771ee
2016-10-10 15:44:41 +08:00
Mark Banner
56a7b3961a Bug 1251003 - Change .eslintrc files to .eslintrc.js to avoid obsolete config file format. r=mossop
MozReview-Commit-ID: JrbFxQ5rj6I

--HG--
rename : .eslintrc => .eslintrc.js
rename : accessible/.eslintrc => accessible/.eslintrc.js
rename : accessible/tests/browser/.eslintrc => accessible/tests/browser/.eslintrc.js
rename : browser/.eslintrc => browser/.eslintrc.js
rename : browser/base/content/test/alerts/.eslintrc => browser/base/content/test/alerts/.eslintrc.js
rename : browser/base/content/test/chrome/.eslintrc => browser/base/content/test/chrome/.eslintrc.js
rename : browser/base/content/test/general/.eslintrc => browser/base/content/test/general/.eslintrc.js
rename : browser/base/content/test/newtab/.eslintrc => browser/base/content/test/newtab/.eslintrc.js
rename : browser/base/content/test/plugins/.eslintrc => browser/base/content/test/plugins/.eslintrc.js
rename : browser/base/content/test/popupNotifications/.eslintrc => browser/base/content/test/popupNotifications/.eslintrc.js
rename : browser/base/content/test/referrer/.eslintrc => browser/base/content/test/referrer/.eslintrc.js
rename : browser/base/content/test/social/.eslintrc => browser/base/content/test/social/.eslintrc.js
rename : browser/components/contextualidentity/test/browser/.eslintrc => browser/components/contextualidentity/test/browser/.eslintrc.js
rename : browser/components/customizableui/test/.eslintrc => browser/components/customizableui/test/.eslintrc.js
rename : browser/components/dirprovider/tests/unit/.eslintrc => browser/components/dirprovider/tests/unit/.eslintrc.js
rename : browser/components/downloads/test/browser/.eslintrc => browser/components/downloads/test/browser/.eslintrc.js
rename : browser/components/downloads/test/unit/.eslintrc => browser/components/downloads/test/unit/.eslintrc.js
rename : browser/components/extensions/.eslintrc => browser/components/extensions/.eslintrc.js
rename : browser/components/extensions/test/browser/.eslintrc => browser/components/extensions/test/browser/.eslintrc.js
rename : browser/components/extensions/test/xpcshell/.eslintrc => browser/components/extensions/test/xpcshell/.eslintrc.js
rename : browser/components/feeds/test/.eslintrc => browser/components/feeds/test/.eslintrc.js
rename : browser/components/feeds/test/chrome/.eslintrc => browser/components/feeds/test/chrome/.eslintrc.js
rename : browser/components/feeds/test/unit/.eslintrc => browser/components/feeds/test/unit/.eslintrc.js
rename : browser/components/migration/tests/unit/.eslintrc => browser/components/migration/tests/unit/.eslintrc.js
rename : browser/components/newtab/tests/browser/.eslintrc => browser/components/newtab/tests/browser/.eslintrc.js
rename : browser/components/newtab/tests/xpcshell/.eslintrc => browser/components/newtab/tests/xpcshell/.eslintrc.js
rename : browser/components/originattributes/test/browser/.eslintrc => browser/components/originattributes/test/browser/.eslintrc.js
rename : browser/components/places/tests/browser/.eslintrc => browser/components/places/tests/browser/.eslintrc.js
rename : browser/components/places/tests/chrome/.eslintrc => browser/components/places/tests/chrome/.eslintrc.js
rename : browser/components/places/tests/unit/.eslintrc => browser/components/places/tests/unit/.eslintrc.js
rename : browser/components/preferences/in-content/tests/.eslintrc => browser/components/preferences/in-content/tests/.eslintrc.js
rename : browser/components/privatebrowsing/test/browser/.eslintrc => browser/components/privatebrowsing/test/browser/.eslintrc.js
rename : browser/components/safebrowsing/content/test/.eslintrc => browser/components/safebrowsing/content/test/.eslintrc.js
rename : browser/components/search/test/.eslintrc => browser/components/search/test/.eslintrc.js
rename : browser/components/selfsupport/test/.eslintrc => browser/components/selfsupport/test/.eslintrc.js
rename : browser/components/sessionstore/test/.eslintrc => browser/components/sessionstore/test/.eslintrc.js
rename : browser/components/sessionstore/test/unit/.eslintrc => browser/components/sessionstore/test/unit/.eslintrc.js
rename : browser/components/shell/test/.eslintrc => browser/components/shell/test/.eslintrc.js
rename : browser/components/shell/test/unit/.eslintrc => browser/components/shell/test/unit/.eslintrc.js
rename : browser/components/tests/browser/.eslintrc => browser/components/tests/browser/.eslintrc.js
rename : browser/components/translation/test/.eslintrc => browser/components/translation/test/.eslintrc.js
rename : browser/components/translation/test/unit/.eslintrc => browser/components/translation/test/unit/.eslintrc.js
rename : browser/components/uitour/test/.eslintrc => browser/components/uitour/test/.eslintrc.js
rename : browser/experiments/test/xpcshell/.eslintrc => browser/experiments/test/xpcshell/.eslintrc.js
rename : browser/extensions/formautofill/.eslintrc => browser/extensions/formautofill/.eslintrc.js
rename : browser/extensions/formautofill/test/browser/.eslintrc => browser/extensions/formautofill/test/browser/.eslintrc.js
rename : browser/extensions/pdfjs/test/.eslintrc => browser/extensions/pdfjs/test/.eslintrc.js
rename : browser/modules/test/.eslintrc => browser/modules/test/.eslintrc.js
rename : browser/modules/test/unit/social/.eslintrc => browser/modules/test/unit/social/.eslintrc.js
rename : browser/modules/test/xpcshell/.eslintrc => browser/modules/test/xpcshell/.eslintrc.js
rename : devtools/.eslintrc => devtools/.eslintrc.js
rename : devtools/.eslintrc.mochitests => devtools/.eslintrc.mochitests.js
rename : devtools/.eslintrc.xpcshell => devtools/.eslintrc.xpcshell.js
rename : devtools/client/aboutdebugging/test/.eslintrc => devtools/client/aboutdebugging/test/.eslintrc.js
rename : devtools/client/animationinspector/test/.eslintrc => devtools/client/animationinspector/test/.eslintrc.js
rename : devtools/client/animationinspector/test/unit/.eslintrc => devtools/client/animationinspector/test/unit/.eslintrc.js
rename : devtools/client/canvasdebugger/test/.eslintrc => devtools/client/canvasdebugger/test/.eslintrc.js
rename : devtools/client/commandline/test/.eslintrc => devtools/client/commandline/test/.eslintrc.js
rename : devtools/client/debugger/new/test/mochitest/.eslintrc => devtools/client/debugger/new/test/mochitest/.eslintrc.js
rename : devtools/client/debugger/test/.eslintrc => devtools/client/debugger/test/.eslintrc.js
rename : devtools/client/dom/.eslintrc => devtools/client/dom/.eslintrc.js
rename : devtools/client/dom/test/.eslintrc => devtools/client/dom/test/.eslintrc.js
rename : devtools/client/framework/test/.eslintrc => devtools/client/framework/test/.eslintrc.js
rename : devtools/client/inspector/.eslintrc => devtools/client/inspector/.eslintrc.js
rename : devtools/client/inspector/components/test/.eslintrc => devtools/client/inspector/components/test/.eslintrc.js
rename : devtools/client/inspector/computed/test/.eslintrc => devtools/client/inspector/computed/test/.eslintrc.js
rename : devtools/client/inspector/fonts/test/.eslintrc => devtools/client/inspector/fonts/test/.eslintrc.js
rename : devtools/client/inspector/markup/test/.eslintrc => devtools/client/inspector/markup/test/.eslintrc.js
rename : devtools/client/inspector/rules/test/.eslintrc => devtools/client/inspector/rules/test/.eslintrc.js
rename : devtools/client/inspector/shared/test/.eslintrc => devtools/client/inspector/shared/test/.eslintrc.js
rename : devtools/client/inspector/test/.eslintrc => devtools/client/inspector/test/.eslintrc.js
rename : devtools/client/jsonview/.eslintrc => devtools/client/jsonview/.eslintrc.js
rename : devtools/client/jsonview/test/.eslintrc => devtools/client/jsonview/test/.eslintrc.js
rename : devtools/client/memory/test/browser/.eslintrc => devtools/client/memory/test/browser/.eslintrc.js
rename : devtools/client/memory/test/unit/.eslintrc => devtools/client/memory/test/unit/.eslintrc.js
rename : devtools/client/netmonitor/.eslintrc => devtools/client/netmonitor/.eslintrc.js
rename : devtools/client/netmonitor/har/test/.eslintrc => devtools/client/netmonitor/har/test/.eslintrc.js
rename : devtools/client/netmonitor/test/.eslintrc => devtools/client/netmonitor/test/.eslintrc.js
rename : devtools/client/performance/test/.eslintrc => devtools/client/performance/test/.eslintrc.js
rename : devtools/client/performance/test/unit/.eslintrc => devtools/client/performance/test/unit/.eslintrc.js
rename : devtools/client/projecteditor/test/.eslintrc => devtools/client/projecteditor/test/.eslintrc.js
rename : devtools/client/promisedebugger/test/.eslintrc => devtools/client/promisedebugger/test/.eslintrc.js
rename : devtools/client/responsive.html/test/browser/.eslintrc => devtools/client/responsive.html/test/browser/.eslintrc.js
rename : devtools/client/responsive.html/test/unit/.eslintrc => devtools/client/responsive.html/test/unit/.eslintrc.js
rename : devtools/client/responsivedesign/test/.eslintrc => devtools/client/responsivedesign/test/.eslintrc.js
rename : devtools/client/scratchpad/test/.eslintrc => devtools/client/scratchpad/test/.eslintrc.js
rename : devtools/client/shadereditor/test/.eslintrc => devtools/client/shadereditor/test/.eslintrc.js
rename : devtools/client/shared/components/.eslintrc => devtools/client/shared/components/.eslintrc.js
rename : devtools/client/shared/components/test/browser/.eslintrc => devtools/client/shared/components/test/browser/.eslintrc.js
rename : devtools/client/shared/components/test/mochitest/.eslintrc => devtools/client/shared/components/test/mochitest/.eslintrc.js
rename : devtools/client/shared/shim/test/.eslintrc => devtools/client/shared/shim/test/.eslintrc.js
rename : devtools/client/shared/test/.eslintrc => devtools/client/shared/test/.eslintrc.js
rename : devtools/client/shared/test/unit/.eslintrc => devtools/client/shared/test/unit/.eslintrc.js
rename : devtools/client/sourceeditor/.eslintrc => devtools/client/sourceeditor/.eslintrc.js
rename : devtools/client/sourceeditor/test/.eslintrc => devtools/client/sourceeditor/test/.eslintrc.js
rename : devtools/client/storage/test/.eslintrc => devtools/client/storage/test/.eslintrc.js
rename : devtools/client/styleeditor/test/.eslintrc => devtools/client/styleeditor/test/.eslintrc.js
rename : devtools/client/webaudioeditor/test/.eslintrc => devtools/client/webaudioeditor/test/.eslintrc.js
rename : devtools/client/webconsole/net/.eslintrc => devtools/client/webconsole/net/.eslintrc.js
rename : devtools/client/webconsole/net/test/mochitest/.eslintrc => devtools/client/webconsole/net/test/mochitest/.eslintrc.js
rename : devtools/client/webconsole/net/test/unit/.eslintrc => devtools/client/webconsole/net/test/unit/.eslintrc.js
rename : devtools/client/webconsole/new-console-output/test/.eslintrc => devtools/client/webconsole/new-console-output/test/.eslintrc.js
rename : devtools/client/webconsole/test/.eslintrc => devtools/client/webconsole/test/.eslintrc.js
rename : devtools/client/webide/test/.eslintrc => devtools/client/webide/test/.eslintrc.js
rename : devtools/server/tests/browser/.eslintrc => devtools/server/tests/browser/.eslintrc.js
rename : devtools/server/tests/mochitest/.eslintrc => devtools/server/tests/mochitest/.eslintrc.js
rename : devtools/server/tests/unit/.eslintrc => devtools/server/tests/unit/.eslintrc.js
rename : devtools/shared/heapsnapshot/tests/unit/.eslintrc => devtools/shared/heapsnapshot/tests/unit/.eslintrc.js
rename : devtools/shared/platform/content/.eslintrc => devtools/shared/platform/content/.eslintrc.js
rename : devtools/shared/platform/content/test/.eslintrc => devtools/shared/platform/content/test/.eslintrc.js
rename : devtools/shared/security/tests/unit/.eslintrc => devtools/shared/security/tests/unit/.eslintrc.js
rename : devtools/shared/tests/browser/.eslintrc => devtools/shared/tests/browser/.eslintrc.js
rename : devtools/shared/tests/unit/.eslintrc => devtools/shared/tests/unit/.eslintrc.js
rename : devtools/shared/transport/tests/unit/.eslintrc => devtools/shared/transport/tests/unit/.eslintrc.js
rename : devtools/shared/webconsole/test/unit/.eslintrc => devtools/shared/webconsole/test/unit/.eslintrc.js
rename : devtools/shared/worker/tests/browser/.eslintrc => devtools/shared/worker/tests/browser/.eslintrc.js
rename : mobile/android/components/extensions/.eslintrc => mobile/android/components/extensions/.eslintrc.js
rename : mobile/android/components/extensions/test/mochitest/.eslintrc => mobile/android/components/extensions/test/mochitest/.eslintrc.js
rename : security/manager/.eslintrc.json => security/manager/.eslintrc.js
rename : security/manager/ssl/tests/.eslintrc.json => security/manager/ssl/tests/.eslintrc.js
rename : security/manager/ssl/tests/mochitest/browser/.eslintrc.json => security/manager/ssl/tests/mochitest/browser/.eslintrc.js
rename : security/manager/ssl/tests/mochitest/mixedcontent/.eslintrc.json => security/manager/ssl/tests/mochitest/mixedcontent/.eslintrc.js
rename : security/manager/ssl/tests/mochitest/stricttransportsecurity/.eslintrc.json => security/manager/ssl/tests/mochitest/stricttransportsecurity/.eslintrc.js
rename : security/manager/ssl/tests/unit/.eslintrc.json => security/manager/ssl/tests/unit/.eslintrc.js
rename : security/manager/tools/.eslintrc.json => security/manager/tools/.eslintrc.js
rename : storage/.eslintrc => storage/.eslintrc.js
rename : testing/mochitest/browser.eslintrc => testing/mochitest/browser.eslintrc.js
rename : testing/mochitest/chrome.eslintrc => testing/mochitest/chrome.eslintrc.js
rename : testing/mochitest/mochitest.eslintrc => testing/mochitest/mochitest.eslintrc.js
rename : testing/xpcshell/xpcshell.eslintrc => testing/xpcshell/xpcshell.eslintrc.js
rename : toolkit/.eslintrc => toolkit/.eslintrc.js
rename : toolkit/components/aboutmemory/tests/.eslintrc => toolkit/components/aboutmemory/tests/.eslintrc.js
rename : toolkit/components/aboutperformance/tests/browser/.eslintrc => toolkit/components/aboutperformance/tests/browser/.eslintrc.js
rename : toolkit/components/addoncompat/tests/browser/.eslintrc => toolkit/components/addoncompat/tests/browser/.eslintrc.js
rename : toolkit/components/alerts/test/.eslintrc => toolkit/components/alerts/test/.eslintrc.js
rename : toolkit/components/asyncshutdown/tests/xpcshell/.eslintrc => toolkit/components/asyncshutdown/tests/xpcshell/.eslintrc.js
rename : toolkit/components/autocomplete/tests/unit/.eslintrc => toolkit/components/autocomplete/tests/unit/.eslintrc.js
rename : toolkit/components/captivedetect/test/unit/.eslintrc => toolkit/components/captivedetect/test/unit/.eslintrc.js
rename : toolkit/components/commandlines/test/unit/.eslintrc => toolkit/components/commandlines/test/unit/.eslintrc.js
rename : toolkit/components/commandlines/test/unit_unix/.eslintrc => toolkit/components/commandlines/test/unit_unix/.eslintrc.js
rename : toolkit/components/commandlines/test/unit_win/.eslintrc => toolkit/components/commandlines/test/unit_win/.eslintrc.js
rename : toolkit/components/contentprefs/tests/mochitest/.eslintrc => toolkit/components/contentprefs/tests/mochitest/.eslintrc.js
rename : toolkit/components/contentprefs/tests/unit/.eslintrc => toolkit/components/contentprefs/tests/unit/.eslintrc.js
rename : toolkit/components/contentprefs/tests/unit_cps2/.eslintrc => toolkit/components/contentprefs/tests/unit_cps2/.eslintrc.js
rename : toolkit/components/crashes/tests/xpcshell/.eslintrc => toolkit/components/crashes/tests/xpcshell/.eslintrc.js
rename : toolkit/components/crashmonitor/test/unit/.eslintrc => toolkit/components/crashmonitor/test/unit/.eslintrc.js
rename : toolkit/components/ctypes/tests/chrome/.eslintrc => toolkit/components/ctypes/tests/chrome/.eslintrc.js
rename : toolkit/components/ctypes/tests/unit/.eslintrc => toolkit/components/ctypes/tests/unit/.eslintrc.js
rename : toolkit/components/downloads/test/unit/.eslintrc => toolkit/components/downloads/test/unit/.eslintrc.js
rename : toolkit/components/extensions/.eslintrc => toolkit/components/extensions/.eslintrc.js
rename : toolkit/components/extensions/test/mochitest/.eslintrc => toolkit/components/extensions/test/mochitest/.eslintrc.js
rename : toolkit/components/extensions/test/xpcshell/.eslintrc => toolkit/components/extensions/test/xpcshell/.eslintrc.js
rename : toolkit/components/feeds/test/.eslintrc => toolkit/components/feeds/test/.eslintrc.js
rename : toolkit/components/filepicker/test/unit/.eslintrc => toolkit/components/filepicker/test/unit/.eslintrc.js
rename : toolkit/components/filewatcher/tests/xpcshell/.eslintrc => toolkit/components/filewatcher/tests/xpcshell/.eslintrc.js
rename : toolkit/components/formautofill/test/browser/.eslintrc => toolkit/components/formautofill/test/browser/.eslintrc.js
rename : toolkit/components/formautofill/test/chrome/.eslintrc => toolkit/components/formautofill/test/chrome/.eslintrc.js
rename : toolkit/components/formautofill/test/xpcshell/.eslintrc => toolkit/components/formautofill/test/xpcshell/.eslintrc.js
rename : toolkit/components/jsdownloads/test/browser/.eslintrc => toolkit/components/jsdownloads/test/browser/.eslintrc.js
rename : toolkit/components/jsdownloads/test/data/.eslintrc => toolkit/components/jsdownloads/test/data/.eslintrc.js
rename : toolkit/components/jsdownloads/test/unit/.eslintrc => toolkit/components/jsdownloads/test/unit/.eslintrc.js
rename : toolkit/components/lz4/tests/xpcshell/.eslintrc => toolkit/components/lz4/tests/xpcshell/.eslintrc.js
rename : toolkit/components/mediasniffer/test/unit/.eslintrc => toolkit/components/mediasniffer/test/unit/.eslintrc.js
rename : toolkit/components/narrate/.eslintrc => toolkit/components/narrate/.eslintrc.js
rename : toolkit/components/narrate/test/.eslintrc => toolkit/components/narrate/test/.eslintrc.js
rename : toolkit/components/osfile/tests/mochi/.eslintrc => toolkit/components/osfile/tests/mochi/.eslintrc.js
rename : toolkit/components/osfile/tests/xpcshell/.eslintrc => toolkit/components/osfile/tests/xpcshell/.eslintrc.js
rename : toolkit/components/passwordmgr/.eslintrc => toolkit/components/passwordmgr/.eslintrc.js
rename : toolkit/components/passwordmgr/test/.eslintrc => toolkit/components/passwordmgr/test/.eslintrc.js
rename : toolkit/components/passwordmgr/test/browser/.eslintrc => toolkit/components/passwordmgr/test/browser/.eslintrc.js
rename : toolkit/components/passwordmgr/test/unit/.eslintrc => toolkit/components/passwordmgr/test/unit/.eslintrc.js
rename : toolkit/components/perf/.eslintrc => toolkit/components/perf/.eslintrc.js
rename : toolkit/components/perfmonitoring/tests/browser/.eslintrc => toolkit/components/perfmonitoring/tests/browser/.eslintrc.js
rename : toolkit/components/places/tests/.eslintrc => toolkit/components/places/tests/.eslintrc.js
rename : toolkit/components/places/tests/bookmarks/.eslintrc => toolkit/components/places/tests/bookmarks/.eslintrc.js
rename : toolkit/components/places/tests/browser/.eslintrc => toolkit/components/places/tests/browser/.eslintrc.js
rename : toolkit/components/places/tests/chrome/.eslintrc => toolkit/components/places/tests/chrome/.eslintrc.js
rename : toolkit/components/places/tests/expiration/.eslintrc => toolkit/components/places/tests/expiration/.eslintrc.js
rename : toolkit/components/places/tests/favicons/.eslintrc => toolkit/components/places/tests/favicons/.eslintrc.js
rename : toolkit/components/places/tests/history/.eslintrc => toolkit/components/places/tests/history/.eslintrc.js
rename : toolkit/components/places/tests/migration/.eslintrc => toolkit/components/places/tests/migration/.eslintrc.js
rename : toolkit/components/places/tests/network/.eslintrc => toolkit/components/places/tests/network/.eslintrc.js
rename : toolkit/components/places/tests/queries/.eslintrc => toolkit/components/places/tests/queries/.eslintrc.js
rename : toolkit/components/places/tests/unifiedcomplete/.eslintrc => toolkit/components/places/tests/unifiedcomplete/.eslintrc.js
rename : toolkit/components/places/tests/unit/.eslintrc => toolkit/components/places/tests/unit/.eslintrc.js
rename : toolkit/components/promiseworker/tests/xpcshell/.eslintrc => toolkit/components/promiseworker/tests/xpcshell/.eslintrc.js
rename : toolkit/components/prompts/test/.eslintrc => toolkit/components/prompts/test/.eslintrc.js
rename : toolkit/components/remotebrowserutils/tests/browser/.eslintrc => toolkit/components/remotebrowserutils/tests/browser/.eslintrc.js
rename : toolkit/components/satchel/test/.eslintrc => toolkit/components/satchel/test/.eslintrc.js
rename : toolkit/components/satchel/test/browser/.eslintrc => toolkit/components/satchel/test/browser/.eslintrc.js
rename : toolkit/components/satchel/test/unit/.eslintrc => toolkit/components/satchel/test/unit/.eslintrc.js
rename : toolkit/components/search/tests/xpcshell/.eslintrc => toolkit/components/search/tests/xpcshell/.eslintrc.js
rename : toolkit/components/social/test/xpcshell/.eslintrc => toolkit/components/social/test/xpcshell/.eslintrc.js
rename : toolkit/components/sqlite/tests/xpcshell/.eslintrc => toolkit/components/sqlite/tests/xpcshell/.eslintrc.js
rename : toolkit/components/startup/tests/browser/.eslintrc => toolkit/components/startup/tests/browser/.eslintrc.js
rename : toolkit/components/startup/tests/unit/.eslintrc => toolkit/components/startup/tests/unit/.eslintrc.js
rename : toolkit/components/telemetry/tests/unit/.eslintrc => toolkit/components/telemetry/tests/unit/.eslintrc.js
rename : toolkit/components/terminator/tests/xpcshell/.eslintrc => toolkit/components/terminator/tests/xpcshell/.eslintrc.js
rename : toolkit/components/thumbnails/test/.eslintrc => toolkit/components/thumbnails/test/.eslintrc.js
rename : toolkit/components/timermanager/tests/unit/.eslintrc => toolkit/components/timermanager/tests/unit/.eslintrc.js
rename : toolkit/components/url-classifier/tests/mochitest/.eslintrc => toolkit/components/url-classifier/tests/mochitest/.eslintrc.js
rename : toolkit/components/url-classifier/tests/unit/.eslintrc => toolkit/components/url-classifier/tests/unit/.eslintrc.js
rename : toolkit/components/urlformatter/tests/unit/.eslintrc => toolkit/components/urlformatter/tests/unit/.eslintrc.js
rename : toolkit/components/viewsource/test/.eslintrc => toolkit/components/viewsource/test/.eslintrc.js
rename : toolkit/components/viewsource/test/browser/.eslintrc => toolkit/components/viewsource/test/browser/.eslintrc.js
rename : toolkit/components/workerloader/tests/.eslintrc => toolkit/components/workerloader/tests/.eslintrc.js
rename : toolkit/components/xulstore/tests/chrome/.eslintrc => toolkit/components/xulstore/tests/chrome/.eslintrc.js
rename : toolkit/components/xulstore/tests/xpcshell/.eslintrc => toolkit/components/xulstore/tests/xpcshell/.eslintrc.js
rename : toolkit/content/tests/browser/.eslintrc => toolkit/content/tests/browser/.eslintrc.js
rename : toolkit/content/tests/chrome/.eslintrc => toolkit/content/tests/chrome/.eslintrc.js
rename : toolkit/content/tests/unit/.eslintrc => toolkit/content/tests/unit/.eslintrc.js
rename : toolkit/content/tests/widgets/.eslintrc => toolkit/content/tests/widgets/.eslintrc.js
rename : toolkit/crashreporter/test/browser/.eslintrc => toolkit/crashreporter/test/browser/.eslintrc.js
rename : toolkit/crashreporter/test/unit/.eslintrc => toolkit/crashreporter/test/unit/.eslintrc.js
rename : toolkit/crashreporter/test/unit_ipc/.eslintrc => toolkit/crashreporter/test/unit_ipc/.eslintrc.js
rename : toolkit/forgetaboutsite/test/browser/.eslintrc => toolkit/forgetaboutsite/test/browser/.eslintrc.js
rename : toolkit/forgetaboutsite/test/unit/.eslintrc => toolkit/forgetaboutsite/test/unit/.eslintrc.js
rename : toolkit/identity/tests/chrome/.eslintrc => toolkit/identity/tests/chrome/.eslintrc.js
rename : toolkit/identity/tests/unit/.eslintrc => toolkit/identity/tests/unit/.eslintrc.js
rename : toolkit/modules/addons/.eslintrc => toolkit/modules/addons/.eslintrc.js
rename : toolkit/modules/subprocess/.eslintrc => toolkit/modules/subprocess/.eslintrc.js
rename : toolkit/modules/subprocess/test/xpcshell/.eslintrc => toolkit/modules/subprocess/test/xpcshell/.eslintrc.js
rename : toolkit/modules/tests/browser/.eslintrc => toolkit/modules/tests/browser/.eslintrc.js
rename : toolkit/modules/tests/chrome/.eslintrc => toolkit/modules/tests/chrome/.eslintrc.js
rename : toolkit/modules/tests/mochitest/.eslintrc => toolkit/modules/tests/mochitest/.eslintrc.js
rename : toolkit/modules/tests/xpcshell/.eslintrc => toolkit/modules/tests/xpcshell/.eslintrc.js
rename : toolkit/mozapps/downloads/tests/chrome/.eslintrc => toolkit/mozapps/downloads/tests/chrome/.eslintrc.js
rename : toolkit/mozapps/downloads/tests/unit/.eslintrc => toolkit/mozapps/downloads/tests/unit/.eslintrc.js
rename : toolkit/mozapps/extensions/.eslintrc => toolkit/mozapps/extensions/.eslintrc.js
rename : toolkit/mozapps/extensions/test/browser/.eslintrc => toolkit/mozapps/extensions/test/browser/.eslintrc.js
rename : toolkit/mozapps/extensions/test/mochitest/.eslintrc => toolkit/mozapps/extensions/test/mochitest/.eslintrc.js
rename : toolkit/mozapps/extensions/test/xpcshell/.eslintrc => toolkit/mozapps/extensions/test/xpcshell/.eslintrc.js
rename : toolkit/mozapps/extensions/test/xpinstall/.eslintrc => toolkit/mozapps/extensions/test/xpinstall/.eslintrc.js
rename : toolkit/mozapps/update/tests/chrome/.eslintrc => toolkit/mozapps/update/tests/chrome/.eslintrc.js
rename : toolkit/mozapps/update/tests/unit_aus_update/.eslintrc => toolkit/mozapps/update/tests/unit_aus_update/.eslintrc.js
rename : toolkit/mozapps/update/tests/unit_base_updater/.eslintrc => toolkit/mozapps/update/tests/unit_base_updater/.eslintrc.js
rename : toolkit/mozapps/update/tests/unit_service_updater/.eslintrc => toolkit/mozapps/update/tests/unit_service_updater/.eslintrc.js
rename : toolkit/profile/test/.eslintrc => toolkit/profile/test/.eslintrc.js
rename : toolkit/themes/osx/mochitests/.eslintrc => toolkit/themes/osx/mochitests/.eslintrc.js
rename : toolkit/xre/test/.eslintrc => toolkit/xre/test/.eslintrc.js
rename : tools/lint/eslint/eslint-plugin-mozilla/lib/rules/.eslintrc => tools/lint/eslint/eslint-plugin-mozilla/lib/rules/.eslintrc.js
extra : rebase_source : 60affc4b9bf436bba7e0e21a8da3a85d16c9fc06
2016-10-18 08:38:10 +01:00
Carsten "Tomcat" Book
401922b6ce Backed out changeset 1f6f908368e5 (bug 1305289) for gtest failures 2016-10-10 09:33:01 +02:00
Sergei Chernov
0449e02200 Bug 1305289 - Certificate Transparency - basic UI indicator; r=Dolske,keeler
MozReview-Commit-ID: b0SUW2WNJT

--HG--
extra : rebase_source : 893d9945de71004ccda3222782273ad953d8a598
2016-09-28 20:19:56 +03:00
Phil Ringnalda
9251041b3b Merge autoland to m-c, a=merge
MozReview-Commit-ID: 8JQRDBBl2l8
2016-10-08 16:47:23 -07:00
ffxbld
ba04bb95b6 No bug, Automated HPKP preload list update from host bld-linux64-spot-307 - a=hpkp-update 2016-10-08 14:26:37 -07:00
ffxbld
ad799ee214 No bug, Automated HSTS preload list update from host bld-linux64-spot-307 - a=hsts-update 2016-10-08 14:26:35 -07:00
Gian-Carlo Pascutto
5810afce39 Bug 1308568 - Add missing filesystem calls to Allow in case broker is disabled. r=haik
MozReview-Commit-ID: 6AdKbBH0NMh

--HG--
extra : rebase_source : aaf58affb124719b3d65dc819d98e7227abff8ec
2016-10-07 22:09:57 +02:00
Cykesiopka
a4fb559557 Bug 1308132 - Use std::unique_ptr instead of mozilla::UniquePtr as the underlying type for ScopedNSSTypes.h UniqueX types.
MozReview-Commit-ID: IAaBhPTjZft

--HG--
extra : rebase_source : 1675da2e63b222dd7ea9ee9d481fb9c04a490d1a
extra : histedit_source : 23fbbd8c96c7d014d57591579a44c666b9197362
2016-10-06 17:01:58 +08:00
Cykesiopka
ff965dc7b2 Bug 1305930 - Stop using PL_strnlen() in PSM.
strnlen() is available on all the platforms we care about, so we should use that
instead.

MozReview-Commit-ID: H3ac5AHiRJk

--HG--
extra : rebase_source : 911f292e97facf5807a1bc1654bdbc1fab87c8bc
extra : histedit_source : 17ff8322acc90bb88efd428aab1e0e0fc785ed61
2016-10-05 00:32:23 +08:00
Cykesiopka
1d6f642d9d Bug 1186286 - Consult more than just the CN when deleting a cert so it's always clear what's being deleted. r=mgoodwin
Deleting certs via the cert manager results in a confirmation dialog popping up.
This dialog contains a list of certs that were selected for deletion.

Currently, only the Common Name of each cert is used to represent it in the list.
This is a problem for certs that don't have a CN. More jarringly, the cert
manager itself falls back to various other attributes, so for example selecting
a cert that is represented by its OU ends up popping up a dialog where an empty
list is shown.

MozReview-Commit-ID: 3z4BebW8Ucd

--HG--
extra : rebase_source : 468eb3de470e3ec42471c80183a9c48ebfb130c9
extra : histedit_source : 90e1d2fc73aaba4ded68d933b6ea3a6092d60636
2016-10-07 20:14:27 +08:00
Cykesiopka
77d242f817 Bug 1186286 - Move some code around to facilitate code reuse for the subsequent patch. r=mgoodwin
The existing code in head.js is moved out because it doesn't need to be there
now, and probably not in the near future.

MozReview-Commit-ID: GWUW9wT3fzF

--HG--
extra : rebase_source : b7ba2a621df205bda8bdb0cbd493a22ce49a705f
extra : histedit_source : e9094261bc717ffd0a320b180fba4aab21122fa4
2016-10-07 20:11:35 +08:00
Phil Ringnalda
ef58a75ffd Merge m-c to autoland 2016-10-06 20:24:09 -07:00
Phil Ringnalda
fd7b7476c2 Merge m-i to m-c, a=merge
MozReview-Commit-ID: 93ZdJbK1x05
2016-10-06 19:58:18 -07:00
Gian-Carlo Pascutto
bbcb394669 Bug 1289718 - Clean up stat/stat64 wrapper. Deal with non-default TMPDIR. r=jld
MozReview-Commit-ID: DW63be9qd3z

--HG--
extra : rebase_source : 0a1860c70a631b24bcafecb4946c044148536004
2016-10-06 13:25:13 +02:00
Gian-Carlo Pascutto
f3a1ed7502 Bug 1289718 - Extend sandbox file broker to handle paths, support more syscalls. r=jld,tedd
MozReview-Commit-ID: DW415ABoaeN
MozReview-Commit-ID: cXrlXNlEwh
MozReview-Commit-ID: CIX6d7td6Bc
MozReview-Commit-ID: DCQ9DGBBjm4
MozReview-Commit-ID: BOYSSof3t7
MozReview-Commit-ID: LmsTqv0GzC2
MozReview-Commit-ID: HOWR0HEHmMg
MozReview-Commit-ID: 6IzqdrUP7lD
MozReview-Commit-ID: 6r6sqOVekVu
MozReview-Commit-ID: 5FL2WkhIxFx
MozReview-Commit-ID: CcTyHn76p46
MozReview-Commit-ID: F8erB4Tvn2V
MozReview-Commit-ID: D9m10t0Rodc
MozReview-Commit-ID: I1llpEBgDP6

--HG--
extra : rebase_source : 1d50d5b7a9936c76decdf268a4e66e34ee7b200c
2016-09-27 17:25:06 +02:00
Cykesiopka
ca5051d9c8 Bug 1296214 - Stop storing handle to CERTCertificate in ExtendedValidation.cpp. r=keeler
This may save us some memory and reduce the number of static constructors.

MozReview-Commit-ID: FNIkiFtRjfK

--HG--
extra : rebase_source : d2781f11db7a1f8370c0e6c6c8e6f0fb52122614
2016-10-06 16:43:45 +08:00
Franziskus Kiefer
dc37f9c34a Bug 1305970 - land NSS 0x6b3812492e71, r=me
--HG--
extra : rebase_source : c08070e4b100c8a9d9a648cdf4d0cb3e16c2c86f
2016-10-05 17:52:14 +02:00
Haik Aftandilian
0ebb0c2d3e Bug 1306508 - Whitelist /private/var/folders/ in DEBUG and reduce content process write access further; r=gcp
Removes global write access from the content process (instead of
just blocking write access to $HOME) for level 1 and 2 Mac content
sandboxes. Allows writes to /private/var/folders/[0-9][0-9]/ in
DEBUG mode so that leaktest can continue to work.

MozReview-Commit-ID: 635o7Nj9oW1

--HG--
extra : rebase_source : 7e23612f56a31de83307057c1e6d0eaadb937614
2016-10-12 11:53:38 -07:00
Carsten "Tomcat" Book
3522f1d38a merge mozilla-inbound to mozilla-central a=merge 2016-10-05 15:42:48 +02:00
Bob Owen
61b439db23 Bug 1307375: Add the use of MOZ_LOG to windows sandbox logging. r=jimm 2016-10-05 08:10:46 +01:00
Wes Kocher
5a2fb874ca Merge inbound to central, a=merge 2016-10-04 17:32:01 -07:00
Tom Schuster
774a8bf34d Bug 1302163 - Change code to use SprintfLiteral instead of snprintf. r=ehsan 2016-10-04 17:57:51 +02:00
Cykesiopka
ebfb27c403 Bug 1142350 - Remove nsIUserCertPicker, nsICertPickDialogs and associated code from mozilla-central. r=keeler
The code is used in comm-central, but is unused in mozilla-central. It will be
imported into comm-central in Bug 1297368.

MozReview-Commit-ID: BEY9BR0YRiD

--HG--
extra : rebase_source : 6d34c1e82cd749a009f26be50fde0537373f2f9e
2016-09-21 19:34:12 +08:00
Wes Kocher
b4e6b8fba5 Merge m-c to autoland, a=merge 2016-10-04 17:42:48 -07:00
Sebastian Hengst
8cfe0782a2 Backed out changeset 4967ccb1d9ff (bug 332442) for frequent intermittent throwing in browser_editCACertTrust.js. r=backout 2016-10-12 19:15:58 +02:00
Sebastian Hengst
7134c41b30 Backed out changeset c833c9f92554 (bug 332442)
--HG--
rename : security/manager/pki/resources/content/editcacert.js => security/manager/pki/resources/content/editcerts.js
2016-10-12 19:13:46 +02:00
Jonathan Hao
8c7b033b68 Bug 1264562 - Part 5: Double key OCSP cache with firstPartyDomain (adapted from Tor Browser patch #13670) r=keeler
--HG--
extra : rebase_source : cfca6f16dcd315c03704e75ed63181466a8eb5c4
2016-10-18 17:08:39 +08:00
Jonathan Hao
d9e14ecf6a Bug 1264562 - Part 4: Instantiates an NSSCertDBTrustDomain containing the first party domain (adapted from Tor Browser patch #13670) r=keeler
--HG--
extra : rebase_source : c43aa11ae06a3281219d1c70c0ec274c258e43c8
2016-10-04 16:49:55 +08:00
Jonathan Hao
957c94fd0a Bug 1264562 - Part 3: Store the firstPartyDomain in TransportSecurityInfo (adapted from Tor Browser patch 13670) r=keeler
--HG--
extra : rebase_source : 9eeec008dccfb261c28f1678b9922962345d1940
2016-10-18 16:45:23 +08:00
Jonathan Hao
c151a853e3 Bug 1264562 - Part 2: Test firstPartyDomain in test_ocsp_caching.js r=keeler
--HG--
extra : rebase_source : bb003c3c432b62397e742ad648fbd46ca65ae518
2016-10-14 19:43:51 +08:00
Jonathan Hao
42cdd28f23 Bug 1264562 - Part 1: Add firstPartyDomain to socket transport (adapted from Tor Browser patch 13670) r=mayhemer
--HG--
extra : rebase_source : f10e38a44f592bcf0db32d98338f2d16edeab58b
2016-10-12 15:32:22 +08:00
Franziskus Kiefer
eb4364e341 Bug 1305970 - land NSS 0xe7553afc7665, r=me
--HG--
extra : rebase_source : ab9c9f3eaa86da51eb3a498535f9ff4b7777b7d6
2016-10-04 07:59:19 +02:00
Franziskus Kiefer
e8b2ba94d1 Bug 1309859 - Send two key shares in tls1.3 client hello, r=mt,keeler
--HG--
extra : amend_source : 0aef745019887dfc6e8cf10887468e2ce27e03f1
2016-10-13 14:15:51 +02:00
David Keeler
ee56723139 bug 1304188 - introduce X509.jsm r=Cykesiopka,jcj
This is mostly a preliminary review request, although I think everything that
should be done in this bug is present. This intentionally does not include
support for decoding extensions or subject public keys.

MozReview-Commit-ID: 4ewu66Xx411

--HG--
extra : rebase_source : 6105cf16e46d5d2cc9355cf38f8d0098a8a40462
2016-09-20 15:36:25 -07:00
Haik Aftandilian
10dcc223b4 Bug 1312273 - Twitter videos can't play in recent nightlies on OS X 10.9; r=gcp
MozReview-Commit-ID: JidUYCkR8Lp

--HG--
extra : rebase_source : cda86dd86ed1359c979176513cd06a79fa2ab3c8
2016-10-24 10:37:54 -07:00
Haik Aftandilian
4f170e903e Bug 1307282 - Remove redundant read-metadata rights from the content sandbox; r=gcp
MozReview-Commit-ID: CILCWk4nINs

--HG--
extra : rebase_source : b3d738365a978505fdbc5ba0a94de62a8824e2f2
2016-09-30 11:59:48 -07:00
Haik Aftandilian
bef74339e5 Bug 1307282 - Remove unused sandbox ruleset macros; r=gcp
MozReview-Commit-ID: A7x55tDN4b9

--HG--
extra : rebase_source : 52ef8da1bf9df868c3f9cc0cbdfdee2147425454
2016-09-28 16:37:52 -07:00
Ryan VanderMeulen
e980397fb4 Merge m-c to autoland. a=merge 2016-10-07 23:22:46 -04:00
David Keeler
a80e2f28a3 bug 1289865 - look in more registry locations for enterprise roots r=Cykesiopka,mhowell
This adds the following locations:
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Root\Certificates
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Root\Certificates
to the location that was already being searched, which is:
HKLM\SOFTWARE\Microsoft\SystemCertificates

MozReview-Commit-ID: LGOT4YNEqLV

--HG--
extra : rebase_source : 735230f03b4e9b94f350cdbd3930b68975824458
2016-10-06 16:14:06 -07:00
Sebastian Hengst
c96a2d24c7 Backed out changeset 9887bfe1f8fa (bug 1308568) on request of its developer. r=backout 2016-10-07 22:07:47 +02:00
Gian-Carlo Pascutto
ad0af05265 Bug 1308568 - Add missing filesystem calls to Allow in case broker is disabled. r=haik
MozReview-Commit-ID: 6AdKbBH0NMh

--HG--
extra : rebase_source : 5b9eb1e2668d6490bf6688d14e61c2c359f46b50
2016-10-07 20:58:11 +02:00
Sebastian Hengst
fd0ca58e46 No bug - Fix eslint warnings which popped up with delay. r=eslint-fix 2016-10-07 16:58:58 +02:00
Mark Goodwin
19e1ce84e0 Bug 1306471 - Modify the SiteSecurityService to allow dynamic pin preloads r=keeler
MozReview-Commit-ID: JLbJcMuvcyI

--HG--
extra : rebase_source : fec1e75d3ca35d17d71d797e46c45983aaeb0c12
2016-10-06 11:00:43 +01:00
Andi-Bogdan Postelnicu
c7be178cd3 Bug 1309133 - null terminate pathBuf2 in SandboxBroker::ThreadMain. r=gcp
MozReview-Commit-ID: 8iA4Yzwj8nv

--HG--
extra : rebase_source : 81af49ea741957a3a79c91dd5503196a0a28a9ef
2016-10-11 15:42:39 +03:00
Phil Ringnalda
9c92a69a82 Merge autoland to m-c, a=merge 2016-10-01 14:00:21 -07:00
ffxbld
20d52ee5f4 No bug, Automated HPKP preload list update from host bld-linux64-spot-316 - a=hpkp-update 2016-10-01 05:51:40 -07:00
ffxbld
eddc6a1d95 No bug, Automated HSTS preload list update from host bld-linux64-spot-316 - a=hsts-update 2016-10-01 05:51:37 -07:00
Cykesiopka
8b1a108f37 Bug 1304587 - Avoid using types that correspond to char/char16_t strings in PKCS #11 IDL files. r=keeler
Typically, the interfaces involved don't need to use raw char/char16_t strings,
and hence can benefit from the additional safety of using the Mozilla string
classes.

In some places, this patch also changes some UTF-16 APIs to UTF-8 where the
implementations can never actually support UTF-16. This reduces the amount of
code and runtime conversion.

MozReview-Commit-ID: y8o5wLBohe

--HG--
extra : rebase_source : 130c8b77a98d21d5b9a0efeccae8861d89fa8f02
2016-10-01 00:46:13 +08:00
Cykesiopka
9a3244d164 Bug 1305531 - Add test cases to test_sdr.js to ensure recommended way of using encryptString() and decryptString() works. r=keeler
MozReview-Commit-ID: 5vPxUZyzGSz

--HG--
extra : rebase_source : 6aba7627e3c0c79ea633933ce7f140c20b16c9d9
2016-10-01 09:29:29 +08:00
Cykesiopka
e95a6f224a Bug 1305531 - Use ACString instead of AUTF8String in nsISecretDecoderRing.idl to unbreak decrypting saved usernames and passwords. r=keeler
Bug 1275841 switched some IDL types from "string" to "AUTF8String".
This had the unintentional effect of breaking decryption of previously saved
passwords that contained special characters.

In particular, the AUTF8String type means XPConnect may convert any strings
using that type to UTF-16 when crossing XPConnect boundaries.
However, crypto-SDR.js (responsible for encrypting and decrypting for the
password manager) expects to do conversions between UTF-16 and UTF-8 itself.
What ends up happening is crypto-SDR.js decrypts a saved password and tries to
convert from UTF-8 to UTF-16, but fails because the decrypted text is already
UTF-16.

The solution is to use ACString instead of AUTF8String. ACString does not result
in automatic encoding changes, so the expectations of crypto-SDR.js are met
again, and lets SecretDecoderRing.cpp keep the benefit of working with smart
string types.

This change probably breaks passwords saved after Bug 1275841 landed and before
this patch landed, but the number of passwords this patch breaks is probably
much lower than the number of passwords that would be broken if this patch did
not land.

MozReview-Commit-ID: 6Z01zfwJ6t7

--HG--
extra : rebase_source : 514e78f2e1c2cef3b3692656b20daf3b068a4fee
2016-10-01 09:29:28 +08:00
David Keeler
8d6b6a78fe bug 1243923 - add support for the CA/Browser Forum EV OID r=Cykesiopka,jcj
MozReview-Commit-ID: 4zqzistEhvo

--HG--
extra : rebase_source : 62d28c3715fcb225ec83ba422621dd3f8c40f708
2016-09-02 16:39:15 -07:00
David Keeler
a0181b703e Bug 1305422 - part 15 - don't call size_forward in nsPKCS12Blob; r=mgoodwin,nfroyd
Before this patch, nsPKCS12Blob::digest_read used size_forward to perform a size
check on a buffer. However, the entire set of {digest_open, digest_close,
digest_read, digest_write} was unnecessary because NSS provides this
functionality by default when using SEC_PKCS12DecoderStart. This patch
simplifies things by removing the extraneous implementations.
2016-09-29 19:33:57 -07:00
Carsten "Tomcat" Book
5b45193594 merge mozilla-inbound to mozilla-central a=merge 2016-09-29 11:44:58 +02:00
Franziskus Kiefer
27936d1ae9 Bug 1305970 - land NSS 0x233a44e96b22, r=me
--HG--
extra : amend_source : ba5ab6511baabb43e260faa7a5705c48dea908c4
2016-09-29 07:59:34 +02:00
Martin Thomson
9ddbbc7158 Bug 1306003 - Enable P-521, r=ekr,rbarnes
MozReview-Commit-ID: 1oF98CACtQV

--HG--
extra : rebase_source : 61c6a4c87a5de305e7701654a3c5e7ecdacc75de
2016-09-29 10:40:40 +10:00
Haik Aftandilian
c7963e7731 Bug 1284588 - OS X: Disable content process write access to user files in the home directory; r=gcp
Changes the semantics of the security.sandbox.content.level pref on OS X with
respect to file access to the user's home directory. With the fix, Nightly
defaults to 2 while other releases will default to 1. The level values now
have the following meaning.

*) security.sandbox.content.level=0 disables content process sandboxing.
No change here.

*) security.sandbox.content.level=1 blocks write access to the majority of the
home directory.

*) security.sandbox.content.level=2 includes the write access blocking in
level 1, but also blocks both read and write access to ~/Library and $PROFILE
excluding the extensions and weave subdirectories.

Prior to this fix, Nightly defaulted to a value of 1 while all other releases
used 0. The value of 1 meant that read/write access to ~/Library and the
$PROFILE dir (excluding $PROFILE/{extensions,weave}) was prevented.

The strength of a level=1 sandbox is reduced by this with fix,
but level=1 becomes the first ride-the-trains content sandbox candidate,
Nightly changes to level=2, and higher levels still indicate a more
restrictive sandbox.

MozReview-Commit-ID: 7NJAe24T4pU

--HG--
extra : rebase_source : 8cb5ea82004ad631fe688bafffa9dc9979568679
2016-09-26 11:30:08 -07:00
Carsten "Tomcat" Book
572e74ee99 merge mozilla-inbound to mozilla-central a=merge 2016-09-28 15:56:33 +02:00
David Parks
1748bfae57 Bug 1269114 - [x86_64] Last picked directory not saved when using Flash Player uploader. r=jimm
Adds a couple of registry paths to the broker's ALLOW policy.
2016-09-24 02:54:12 -07:00
Kate McKinley
c57d400961 Bug 1246540 - HSTS Priming Proof of Concept. r=ckerschb, r=mayhemer, r=jld, r=smaug, r=dkeeler, r=jmaher, p=ally
HSTS priming changes the order of mixed-content blocking and HSTS
upgrades, and adds a priming request to check if a mixed-content load is
accesible over HTTPS and the server supports upgrading via the
Strict-Transport-Security header.

Every call site that uses AsyncOpen2 passes through the mixed-content
blocker, and has a LoadInfo. If the mixed-content blocker marks the load as
needing HSTS priming, nsHttpChannel will build and send an HSTS priming
request on the same URI with the scheme upgraded to HTTPS. If the server
allows the upgrade, then channel performs an internal redirect to the HTTPS URI,
otherwise use the result of mixed-content blocker to allow or block the
load.

nsISiteSecurityService adds an optional boolean out parameter to
determine if the HSTS state is already cached for negative assertions.
If the host has been probed within the previous 24 hours, no HSTS
priming check will be sent.

MozReview-Commit-ID: ES1JruCtDdX

--HG--
extra : rebase_source : 2ac6c93c49f2862fc0b9e595eb0598cd1ea4bedf
2016-09-27 11:27:00 -04:00
Jed Davis
75b81d566f Bug 1303813 - Allow media plugins to call madvise with MADV_FREE. r=gcp
--HG--
extra : rebase_source : 42fa66774311cc1dcf2c18643c7118483acff89d
2016-09-26 16:10:00 -04:00
Jed Davis
cb2e7d319f Bug 1304220 - Allow media plugins to use the times(2) syscall. r=gcp
--HG--
extra : rebase_source : 595bf264b48968ec25d02c82866ef02ef87a59fa
2016-09-26 16:32:00 -04:00
Carsten "Tomcat" Book
762cd18602 Merge mozilla-central to autoland 2016-09-28 16:52:13 +02:00
Masatoshi Kimura
5169b351fb Bug 1305561 - Do not check renego extension when TLS version is 1.3. r=keeler
MozReview-Commit-ID: JtT6hLcbl3W

--HG--
extra : rebase_source : 32e1e28bad773bd7333468b6f93d01cc05ab4321
extra : source : faaf8817705900a1134e2be7bc9c349a33e670aa
2016-09-27 20:06:22 +09:00
Sergei Chernov
976d5c3f1d Bug 1293231 - Certificate Transparency - basic telemetry reports; r=Cykesiopka,keeler
MozReview-Commit-ID: EGvuZADObJo

--HG--
extra : rebase_source : 9a059c9f8e2fdf9bfc693b0b5649808b1beeb67b
2016-08-11 13:41:50 +03:00
Martin Thomson
6158ad648f Bug 1304926 - Enable specific named groups, r=keeler
MozReview-Commit-ID: KIe6D9iRAXt

--HG--
extra : rebase_source : a8f6d712b59bf373e52a88b8451c8db4a3f71d65
extra : amend_source : 071e9f4c3ebe336af3888b76e778d0d753d326fc
2016-09-26 15:06:42 +10:00
EKR
bf2bd2813c Bug 1304919 - PSM changes to support TLS 1.3 key exchange, r=mt
MozReview-Commit-ID: 1GMk8PajbHj

--HG--
extra : rebase_source : 3a5ee2f04595b54fc50b84b8e9c4196f31adb1f0
extra : source : b54d608edfa874dfd3d8305e771490a4b25cf641
2016-09-23 14:27:29 +10:00
Martin Thomson
eb1023f573 Bug 1304919 - Update NSS to trunk, r=ekr
MozReview-Commit-ID: g0XqOwNzkz

--HG--
extra : rebase_source : f3b55831f927074846ce3def0e72941ba3c93ebf
2016-09-26 10:47:58 +10:00
ffxbld
3c8aea1193 No bug, Automated HPKP preload list update from host bld-linux64-spot-389 - a=hpkp-update 2016-09-24 06:03:53 -07:00
ffxbld
45fdba1af2 No bug, Automated HSTS preload list update from host bld-linux64-spot-389 - a=hsts-update 2016-09-24 06:03:51 -07:00
Carsten "Tomcat" Book
a65e4225ef merge mozilla-inbound to mozilla-central a=merge 2016-09-23 12:05:53 +02:00
Kai Engert
c4ae869e28 Bug 1296266, land NSS_3_27_BETA4, r=franziskus 2016-09-22 21:21:30 +02:00
Haik Aftandilian
497d8e9b73 Bug 1299329 - Remove printing-related privileges from content process sandbox; r=gcp
MozReview-Commit-ID: 9fnfkKvjpGx

--HG--
extra : rebase_source : bc1361b350171920ae8e19747c77287ea82f6f8f
2016-09-16 16:09:51 -07:00
David Keeler
b1cb7643ef bug 1302140 - add policy to disable SHA-1 except for certificates issued by non-built-in CAs r=jcj,rbarnes
MozReview-Commit-ID: 2uwHPxk0VhZ

--HG--
extra : rebase_source : 1c7b5d2559139fa8286342decf4e4f7c83317e29
2016-09-14 15:11:15 -07:00
Sebastian Hengst
d8888f81d1 Backed out changeset 2df66e8b7411 (bug 1302140) for Windows build bustage in CertVerifier.cpp. r=backout on a CLOSED TREE 2016-09-21 20:47:08 +02:00
David Keeler
d374bc442a bug 1302140 - add policy to disable SHA-1 except for certificates issued by non-built-in CAs r=jcj,rbarnes
MozReview-Commit-ID: 2uwHPxk0VhZ

--HG--
extra : rebase_source : 5b1342abc2eb260ec91464b3a1d331baf8968460
2016-09-14 15:11:15 -07:00
Wes Kocher
da7b1c61a1 Merge inbound to central, a=merge 2016-09-19 15:51:39 -07:00
Franziskus Kiefer
5162ef8799 Bug 1296266 - NSS 3.27 tip d9f7136f2ae3, r=ttaubert
--HG--
extra : rebase_source : 44fbdcc69ba19a91ca6dcc9f2a3f1610ffad7e89
2016-09-16 10:00:57 -07:00
Phil Ringnalda
7405ef6df8 Merge m-c to autoland 2016-09-17 12:03:25 -07:00
ffxbld
653cac986e No bug, Automated HPKP preload list update from host bld-linux64-spot-593 - a=hpkp-update 2016-09-17 05:55:01 -07:00
ffxbld
873ec403ea No bug, Automated HSTS preload list update from host bld-linux64-spot-593 - a=hsts-update 2016-09-17 05:54:58 -07:00
Joseph Yeh
d51b2b87d0 Bug 1298872 - Fix text cropped and overflowed in advanced pane in-content dialogs; r=MattN
MozReview-Commit-ID: C7Q5VnipTIa

--HG--
extra : rebase_source : 7a7a967c6a58c2d54ed69ec6a41802f5b6fe747f
2016-09-05 18:11:08 +08:00
Bob Owen
fe5ccaf977 Bug 1303325: Revert changes to policy_target.cc that cause issue with CoInitializeSecurity. r=aklotz
This also reverts the Bug 1287426 Part 8 patch that turned the USER_NON_ADMIN loken into a restricted token.

MozReview-Commit-ID: 9fNeyhAHw55

--HG--
extra : rebase_source : adbe59260d512b5d17b6e3ea6c1fe484c06eb555
2016-09-16 13:49:53 +01:00
Carsten "Tomcat" Book
d2c3fe7fd3 merge autoland to mozilla-central a=merge 2016-09-14 12:07:02 +02:00
Joseph Yeh
eb7643afdc Bug 1049001 - Convert the certManager dialog to in-content; r=MattN
MozReview-Commit-ID: GKkbxlWboPO

--HG--
extra : rebase_source : 6a4814b3d3f7d733a6361f8adcca76371df6039f
2016-09-13 14:27:13 -07:00
David Keeler
2b1cac9df4 bug 1299676 - introduce der.jsm as a minimal js ASN.1 DER decoder r=Cykesiopka,jcj
MozReview-Commit-ID: 29oNa3S3s6a

--HG--
extra : rebase_source : 6e55bc8a105d480d33d58cd5d4bdcdf68a83e26c
2016-08-23 16:30:38 -07:00
Haik Aftandilian
9de1898bc2 Bug 1290619 - Content sandbox rules should use actual profile directory, not Profiles/*/ regex's; r=jimm
Passes the profile dir to the content process as a -profile CLI
option so that the correct profile dir can be used in the OS X content
sandbox rules.  Only enabled on OS X for now.

On Nightly, profile directories will now be read/write protected
from the content process (apart from a few profile subdirectories) even
when they don't reside in ~/Library.

xpcshell tests invoke the content process without providing a
profile directory. In that case, we don't need to add filesystem
profile dir. read/write exclusion rules to the sandbox.

This patch adds two new macros to the content sandbox rule set:
|profileDir| holds the path to the profile or the emptry string;
|hasProfileDir| is a boolean (1 or 0) that indicates whether or
not the profile directory rules should be added. If |hasProfileDir|
is 0, profile directory exclusion rules don't need to be added
and |profileDir| is not used.

MozReview-Commit-ID: rrTcQwTNdT

--HG--
extra : rebase_source : 3d5b612c8eb3a1d0da028eba277cd9d6f0c9ac00
2016-08-30 13:32:21 -07:00
Gregory Szorc
99515b1b1a Bug 1283203 - Update to Visual Studio 2015 Update 3, SDK 10.14393.0; r=glandium
Visual Studio 2015 Update 3 has been out for a few months. It appears
stable. So let's start using it.

As part of this, we also update the Windows SDK to the version
corresponding with the Windows 10 Anniversary Update (10.14393.0).

MozReview-Commit-ID: C36sRlKqa8t

--HG--
extra : rebase_source : 2fd46d6053d3eaf62dd8b2b291881c5172cc6056
2016-09-09 10:35:15 -07:00
Bob Owen
182a56ac2a Bug 1301034: Log when non-static file policy AddRule calls fail in Windows SandboxBroker. r=jimm
MozReview-Commit-ID: DA5NizLfFfA

--HG--
extra : rebase_source : 23ea76054c98ab071b0d03e5fc0d7e57d1668244
2016-09-12 11:11:22 +01:00
ffxbld
3107c66acb No bug, Automated HPKP preload list update from host bld-linux64-spot-424 - a=hpkp-update 2016-09-10 05:50:42 -07:00
ffxbld
e1dae8a80b No bug, Automated HSTS preload list update from host bld-linux64-spot-424 - a=hsts-update 2016-09-10 05:50:40 -07:00
Igor
60cd1e3bb7 Bug 1296180 - Replace more uses of PR_ARRAY_SIZE with mozilla::ArrayLength. r=keeler,mt 2016-09-09 13:17:52 -07:00
Carsten "Tomcat" Book
0f2c669a48 merge mozilla-inbound to mozilla-central a=merge 2016-09-09 12:02:43 +02:00