Brian Smith
d08286d3d3
Bug 1053617: Reduce scope of DER encoding debugging logic to the file it is used in, r=keeler
...
--HG--
extra : rebase_source : c22f7e96dfdd1997626769ac03c6d189321eec1a
2014-08-04 19:07:26 -07:00
Brian Smith
9a2a60943d
Bug 1053616: Remove uses of PR_SetError from mozilla::pkix tests, r=keeler
...
--HG--
extra : rebase_source : 1fc7ce9ab400c39e3c4afb68940be93cc2a0b848
2014-08-13 17:50:42 -07:00
Cykesiopka
f4a67332e8
Bug 1052257 - Add and use error code specific to inadequate key sizes. r=keeler
2014-08-12 22:24:00 -04:00
Jed Davis
1c8a8d2d9b
No bug - Add trailing newlines for non-Android Linux sandbox logging. r=kang
...
--HG--
extra : rebase_source : c0e936b62289c0e5eecad41fce9afac881fe4667
2014-08-14 15:39:14 -07:00
David Keeler
c3d3df58ac
bug 1030963 - remove non-standard window.crypto functions/properties r=jst r=briansmith r=glandium
2014-08-14 09:38:42 -07:00
Brian Smith
3e57ff4e5a
Bug 1048642, Part 3: Remove SECStatus GTest utilities, r=cviecco
...
--HG--
extra : rebase_source : f77202ad8d271604d7620cc5f704a51338c356ab
2014-08-03 22:45:05 -07:00
Brian Smith
065cf239b1
Bug 1048642, Part 2: Change GenerateKeyPair return type from SECStatus to Result, r=cviecco
...
--HG--
extra : rebase_source : 652277e952d224175ea57d4509124ff8180440cb
2014-08-04 10:59:21 -07:00
Brian Smith
4a58c8b13e
Bug 1048642, Part 1: Change TamperOnce return type from SECStatus to Result, r=cviecco
...
--HG--
extra : rebase_source : 1d2e8014153d8bfc6f9008dd9b6b9e4d5ac5dcb7
2014-08-03 22:49:10 -07:00
Kai Engert
bca16ce1ed
Bug 1049006 - Update Mozilla 33 to use NSS 3.17 final and NSPR 4.10.7 final, r=wtc
2014-08-13 21:47:00 +02:00
Jed Davis
033a6785eb
Bug 1043733 - Require sandboxing to load Gecko Media Plugins on Linux. r=jesup r=kang
...
Also refactors how sandbox support and disabling are handled, and allows
simulating a lack of sandbox support with an env var (for testing
without rebuilding a kernel).
2014-08-12 21:28:27 -07:00
David Keeler
3d57f23fab
bug 1040446 - mozilla::pkix: add error code for CA cert used as end-entity cert r=briansmith
2014-08-11 12:35:45 -07:00
Brian Smith
9c4276d25b
Bug 1048070, Part 2: Remove uses of PR_NOT_REACHED and PR_ARRAY_SIZE in mozilla::pkix, r=keeeler
...
--HG--
extra : rebase_source : d373a7526c1048770bed8bacb7e14c8f10e832cb
2014-08-03 18:24:35 -07:00
Brian Smith
3f64294312
Bug 1048070, Part 1: Replace uses of PR_ASSERT in mozilla::pkix, r=keeler
...
--HG--
extra : rebase_source : 3f1dbb4babb6d575bde3088c92aeb6f28d689210
2014-08-02 09:17:59 -07:00
Brian Smith
ea0e98acf5
Bug 1042479: Accept the OIW sha1WithRSASignature OID, r=keeler
...
--HG--
extra : rebase_source : 98dfbf1b5130898604e86c54ad4a8453aa87bde4
2014-08-04 16:34:47 -07:00
Patrick McManus
b82e230f36
bug 1040323 - SecureBrowserUI needs to consider scheme, not just security of connection r=dkeeler
2014-07-28 14:37:41 -04:00
Ryan VanderMeulen
0e89667592
Merge inbound to m-c. a=merge
2014-08-09 11:19:46 -04:00
ffxbld
40f698d0cb
No bug, Automated HPKP preload list update from host bld-linux64-spot-011 - a=hpkp-update
2014-08-09 03:14:42 -07:00
ffxbld
509bcaeb60
No bug, Automated HSTS preload list update from host bld-linux64-spot-011 - a=hsts-update
2014-08-09 03:14:40 -07:00
Wes Kocher
98f9eac6dd
Merge m-c to inbound on a CLOSED TREE
2014-08-08 14:15:34 -07:00
Steven Michaud
844fdf04eb
Bug 1012949
- Sandbox the OpenH264 plugin for Mac r=rjesup,areinald,ted a=PatchNeedsToLandToday
2014-08-08 11:55:22 -05:00
J. Ryan Stinnett
ce8794da11
Bug 1040130 - Allow specifying a client cert for sockets. r=keeler, r=mcmanus
2014-08-07 16:32:00 -04:00
Nicholas Nethercote
a7cf4142b4
Bug 1050009 - Initialize pldhash tables with a length, not a capacity. r=roc.
...
* * *
imported patch rm-dummy-params
--HG--
extra : rebase_source : c25987eb11bae197218d5fc53b77def19afa36ac
2014-08-06 06:31:21 -07:00
Georgios Kontaxis
9bddbaa73e
Bug 1048643: extended nsDocShell with flags to indicate tracking protection status (similar to mixed content blocked/loaded status)
2014-08-07 13:35:03 -07:00
David Keeler
14eafa8e5d
Bug 1036546 - Soft-disable proprietary window.crypto functions via the pref dom.unsafe_legacy_crypto.enabled. r=smaug
2014-08-05 10:48:24 -07:00
Mike Hommey
89777800f9
Bug 1047267 - Move remaining OS_LIBS and EXTRA_LIBS to moz.build. r=gps
...
* * *
Bug 1047267 - To fold with "Move remaining OS_LIBS and EXTRA_LIBS to moz.build"
2014-08-07 14:21:03 +09:00
Mike Hommey
e8b438350d
Bug 1049281 - Move third-party build system "drivers" to config/external, and stop using static dirs. r=gps
...
--HG--
rename : intl/icu/Makefile.in => config/external/icu/Makefile.in
rename : config/nspr/Makefile.in => config/external/nspr/Makefile.in
rename : config/nspr/moz.build => config/external/nspr/moz.build
rename : security/build/Makefile.in => config/external/nss/Makefile.in
rename : security/build/moz.build => config/external/nss/moz.build
rename : security/build/nspr-dummy.def => config/external/nss/nspr-dummy.def
rename : security/build/nss.def => config/external/nss/nss.def
rename : security/build/nss.mk => config/external/nss/nss.mk
2014-08-07 02:58:52 +09:00
Mike Hommey
4a01b3b147
Bug 1048993 - Use nsinstall from $(topobjdir)/config instead of $(DIST)/bin to avoid races when make wants to reinstall it for some reason. r=mshal
2014-08-07 02:58:50 +09:00
Nathan Froyd
e1583db863
Bug 1042226 - move DEFINES += -DAB_CD=$(AB_CD) pattern into config.mk; r=mshal
2014-08-01 12:53:05 -04:00
Monica Chew
afefa8ea41
Bug 1047560: Enable pinning on dropbox (r=keeler)
2014-08-01 13:12:38 -07:00
Mike Hommey
d9443ec932
Bug 1045783 - Move most OS_LIBS to moz.build and do some related cleanup. r=mshal
2014-08-06 07:25:33 +09:00
Kai Engert
a5a24cc8bb
Bug 1049006 - Update Mozilla to use NSS 3.17, r=wtc
2014-08-05 22:22:19 +02:00
Ehsan Akhgari
7257b2f870
Bug 579517 follow-up: Remove NSPR types that crept in
2014-08-08 08:39:07 -04:00
Martin Thomson
d926cc34de
Bug 996237 - Fix nss.def for Android/B2G. r=wtc
2014-08-04 11:51:00 -04:00
Ehsan Akhgari
0403683a4f
Bug 1047782 - Fix some bad impliciit constructors in netwerk/; r=mcmanus
2014-08-05 09:20:50 -04:00
Jed Davis
b0bd63525b
Bug 1047620 - Fix sandboxing for B2G --disable-jemalloc builds. r=kang
...
--HG--
extra : rebase_source : 1b2ec6491277a9dc451ab767d8563076cf522c27
2014-08-04 15:11:33 -07:00
Jed Davis
9d31844f0c
Bug 1012951 - Add Linux sandboxing for GeckoMediaPlugin processes. r=kang r=ted
...
--HG--
extra : rebase_source : 1b890000d5b8d2a8954cdd1118a1023eba829c29
2014-08-04 15:11:18 -07:00
Jed Davis
d2d145dc65
Bug 1046541 - Use stdio for non-Android Linux sandbox error messages. r=kang
...
--HG--
extra : rebase_source : e93a4a76f8188d715886e263a366d694c28b4525
2014-08-04 15:11:04 -07:00
Eric Rahm
6fc80c7e16
Bug 1047176 - Part 1: Disable warning C4640 in certverifier. r=keeler
...
--HG--
extra : rebase_source : a608f8704f57312902b05258ff53a4d1f2010cbc
2014-08-04 11:29:25 -07:00
Patrick McManus
f8a14606da
bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler
2014-08-04 16:54:10 -04:00
Ed Morley
9239e94fea
Backed out changeset fa05c69d7de1 (bug 996237)
2014-08-04 15:34:15 +01:00
Martin Thomson
b3853a0865
Bug 996237 - Fix nss.def for Android/B2G. r=wtc
2014-08-01 14:44:00 -04:00
Ed Morley
606b89b834
Backed out changeset 972daa5dd3c5 (bug 1027720) for build failures
2014-08-04 14:33:14 +01:00
Patrick McManus
004b6798a9
bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler
2014-08-01 16:59:00 -04:00
Ed Morley
7feeef7c09
Merge mozilla-central and inbound
2014-08-04 12:23:28 +01:00
Ed Morley
b17124bab9
Backed out changeset cabe3163d4bc (bug 1047560) for conflicting with the automated HPKP preload list update
2014-08-04 12:22:36 +01:00
Ed Morley
efe972f974
Merge latest green b2g-inbound changeset and mozilla-central; a=merge
2014-08-04 12:13:23 +01:00
ffxbld
a86bcdd47d
No bug, Automated HPKP preload list update from host bld-linux64-spot-075 - a=hpkp-update
2014-08-02 03:22:22 -07:00
ffxbld
b2a536ffc2
No bug, Automated HSTS preload list update from host bld-linux64-spot-075 - a=hsts-update
2014-08-02 03:22:20 -07:00
Bob Owen
8c896093c8
Bug 1045646 - Part 2: Replace AutoPushJSContext in nsCryptoRunnable::Run. r=bholley
2014-08-01 09:00:58 +01:00
Brian Smith
0ccaf0860c
Bug 1043041: Use mozilla::pkix::Time instead of PRTime, r=keeler
...
--HG--
extra : rebase_source : 2cc39d3c322c1355aad003f2497659a091febac2
2014-08-02 08:49:12 -07:00
Brian Smith
de725ae5ef
Bug 1047792: Rely on mozilla::pkix to filter out expired certs instead of CERT_CreateSubjectCertList, r=keeler
...
--HG--
extra : rebase_source : 5182147037b69f0ac3c3cd060d6e2af71bfde2e7
2014-08-01 23:16:21 -07:00
Brian Smith
25a73829af
Bug 1041344: Refactor mozilla::pkix::CheckCertificatePolicies, r=cviecco
...
--HG--
extra : rebase_source : d40184b986e9c6ed44c0b39a485292a91f924f13
2014-07-19 18:51:10 -07:00
Monica Chew
6eea93a408
Bug 1047560: Enable pinning on dropbox (r=keeler)
2014-08-01 13:12:38 -07:00
Jed Davis
9b70e225e5
Bug 1046525 - Allow get{e,}gid and sched_{g,s}etparam in sandboxed content processes. r=kang
...
Some of these were already in the desktop whitelist; those duplicates
are removed.
--HG--
extra : amend_source : 3ab4b50e3f1980b4d7b93cc17f34b926e2aa2396
2014-08-01 15:05:44 -07:00
Brian Smith
18c07f1b91
Bug 1041186, Part 3: More renaming, r=keeler
...
--HG--
extra : rebase_source : e4d70240f25f566c3bde91d515739bf46853fe8d
2014-07-31 20:55:52 -07:00
Brian Smith
d77dac0580
Bug 1041186, Part 2: Rename Input to Reader and InputBuffer to Input, r=keeler
...
--HG--
extra : rebase_source : bf57a9eb6ae5c122912e00a47156010e5ea99478
2014-07-31 12:17:31 -07:00
Brian Smith
ffe743ee06
Bug 1041186, Part 1: Improve buffer overflow protection in mozilla::pkix, r=keeler
...
--HG--
extra : rebase_source : 0f4a33f2c66594930ba9c79233648c70e33ba27c
2014-07-18 22:30:51 -07:00
Brian Smith
5f56fc60d6
Bug 1041343: Use references instead of pointers for TrustLevel output parameters, r=cviecco
...
--HG--
extra : rebase_source : d5c07dc29a95ccb75a7a8f199de26d43950b9ed4
2014-07-20 11:06:26 -07:00
Brian Smith
a95b2088a5
Bug 1039601: Use bounds-checked DERArray instead of plain arrays in pkixocsp.cpp, r=cviecco
...
--HG--
extra : rebase_source : cbe6257fc470069de0f7cb4f9f169550980a6b98
2014-07-16 09:54:10 -07:00
Brian Smith
c45dc156d1
Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler
...
--HG--
extra : rebase_source : 4f3e41916cd7e2c74679d468eeeb702af3321532
2014-07-18 11:48:49 -07:00
Nathan Froyd
12c76f15f7
Bug 1042878 - part 2 - move MOZ_CAIRO_CFLAGS et al additions to C*FLAGS into moz.build; r=glandium
2014-07-24 11:55:33 -04:00
Andrew McCreight
426692835a
Bug 1029151 - Remove dangerous public destructor of nsNSSCertificate. r=keeler
2014-07-30 13:00:29 -07:00
Andrew McCreight
14c7458527
Bug 1029150 - Remove dangerous public destructor of nsCryptoRunnable. r=keeler
2014-07-30 13:00:29 -07:00
Ed Morley
dcbfd040d1
Backed out changeset d50d7e88f35e (bug 1012951) for LSan failures
2014-07-30 16:49:43 +01:00
Jed Davis
8cff1bfff8
Bug 1012951 - Sandbox GMP plugins on Linux using seccomp-bpf. r=kang r=ted
2014-07-29 15:31:12 -07:00
Ehsan Akhgari
3fa82c9346
Bug 1045436 - Fix more bad implicit constructors in XPCOM; r=froydnj
2014-07-29 20:43:56 -04:00
Mike Hommey
c48f53e37a
Bug 1043865 - Remove the remainder of compilation bits from the libs tier. r=gps
2014-07-29 08:59:27 +09:00
Mike Hommey
179299ea01
Bug 1043862 - Make the binaries target use the compile tier. r=gps
2014-07-29 08:58:28 +09:00
Mike Hommey
5f6ba110e6
Bug 1043802 - Remove TOOLS_DIRS and TEST_TOOLS_DIRS. r=gps
2014-07-29 08:55:55 +09:00
Carsten "Tomcat" Book
bcf40664e4
merge mozilla-inbound to mozilla-central a=merge
2014-07-28 15:32:36 +02:00
ffxbld
634832a160
No bug, Automated HPKP preload list update from host b-linux64-ix-0010 - a=hpkp-update
2014-07-26 03:16:45 -07:00
ffxbld
e56e203db4
No bug, Automated HSTS preload list update from host b-linux64-ix-0010 - a=hsts-update
2014-07-26 03:16:43 -07:00
Jed Davis
301d254a40
Bug 1017393 - Record rejected syscall number in crash dump. r=kang
2014-07-24 11:36:00 +02:00
David Keeler
67d0a99f3a
bug 1040889 - don't re-cache OCSP server failures if no fetch was attempted r=briansmith r=cviecco
...
--HG--
extra : rebase_source : e00c84e62ecca3e97794d3ceafcd1f5f618045d1
2014-07-25 16:59:22 -07:00
Mike Hommey
a62cdc4fa7
Bug 1043344 - Move libraries and programs build to the compile tier. r=gps
2014-07-25 07:14:40 +09:00
Jeff Walden
235c1f7500
Bug 1037100 - Remove all use of ScopedDeleteArray from miscellaneous places. r=jcranmer
...
--HG--
extra : rebase_source : 937557b819742ee62e10a4afa6c5152b910cd8b2
2014-07-10 20:37:40 -07:00
Alexandre Poirot
7ea4dd517f
Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files; fix previous bustage on a CLOSED TREE, r=ahal
2014-07-02 15:40:56 -07:00
Brian Smith
2544688b97
Bug 1041730: Remove unused parameters from PublicKeyPinningService, r=cviecco
...
--HG--
extra : rebase_source : 6a091a32ab5178899fc1f9ceb57614f4a87f25c3
2014-07-21 19:18:31 -07:00
Brian Smith
a2f498819e
Bug 1039031: Print name of server in TLS/OCSP tests, r=cviecco
...
--HG--
extra : rebase_source : 4d5ae2bdd920f29c6f820b6daf035ddb12406b12
2014-07-15 16:58:31 -07:00
Marco Castelluccio
3236b9594b
Bug 1021345 - Allow apps to be installed from the Marketplace staging server. r=fabrice
2014-07-23 13:20:25 +02:00
Mike Hommey
7cab62150a
Bug 1041936 part 2 - Directly use the static library "xul" to link into "xul-gtest" instead of having an intermediate library "xul" used by "xul-shared" and "xul-gtest". r=gps
2014-07-23 13:33:09 +09:00
Mike Hommey
95063176fa
Bug 1036894
part 9 - Replace all EXTRA_DSO_LDOPTS, SHARED_LIBRARY_LIBS and LIBS with EXTRA_LIBS, OS_LIBS or OS_LDFLAGS, appropriately. r=gps
...
OS_LIBS for libraries that are not part of the gecko tree, EXTRA_LIBS for
libraries, such as NSPR, that are in the tree, but are not handled by
moz.build just yet. Those EXTRA_LIBS may also come from a system library.
However, in cases where the expanded variables are always empty for the
in-tree case, OS_LIBS is used (as for, e.g. MOZ_ZLIB_LIBS). OS_LDFLAGS is
used exclusively for non-library linker flags.
Always pass EXTRA_LIBS before OS_LIBS on linker command lines.
Forbid EXTRA_DSO_LDOPTS, SHARED_LIBRARY_LIBS and LIBS in Makefiles.
2014-07-23 13:31:02 +09:00
Mike Hommey
5fab42fcaf
Bug 1036894
part 8 - Move most in-tree library linkage information to moz.build, as USE_LIBS. r=gps
2014-07-23 13:30:52 +09:00
Mike Hommey
6d6d400ea1
Bug 1036894
part 6 - Emit SimplePrograms for CPP_UNIT_TESTs, and make the corresponding moz.build config look like that of SIMPLE_PROGRAMS. r=gps
2014-07-23 13:29:44 +09:00
Mike Hommey
a33d7d67e6
Bug 1036894
part 1 - Move MAKE_FRAMEWORK, SDK_LIBRARY, SHARED_LIBRARY_NAME and STATIC_LIBRARY_NAME to moz.build. r=gps
...
At the same time, make the Library data more useful in the build frontend.
2014-07-23 13:29:09 +09:00
Wes Kocher
be4af0e0fd
Merge m-c to inbound
2014-07-22 18:39:17 -07:00
Jonathan Griffin
1c5d8636ac
Backed out changeset 64586374a208 on a CLOSED TREE
2014-07-22 18:29:57 -07:00
Jim Mathies
e5f4ec183a
Bug 948574 - Provide limited access to nsISiteSecurityService apis in the child, and prevent the direct creation of nsISiteSecurityService. r=bz, sr=ptheriault, original author: David Keeler <dkeeler@mozilla.com>
2014-07-22 07:17:45 -05:00
Ehsan Akhgari
a50127383b
Bug 1041325 - Use intrin.h for _ReturnAddress in the chromium sandbox code; r=bbondy
...
--HG--
extra : rebase_source : 06bb642636a9f3df2e75eb950816a7d48da85faf
2014-07-20 19:05:44 -04:00
Ehsan Akhgari
da7f65d605
Backed out changeset 4b792c35d0be (bug 1041325) because of build bustage
2014-07-20 19:19:05 -04:00
Ehsan Akhgari
006ec45925
Bug 1041325 - Use intrin.h for _ReturnAddress in the chromium sandbox code; r=bbondy
2014-07-20 19:05:44 -04:00
Ryan VanderMeulen
21d58ba963
Merge m-c to inbound. a=merge
2014-07-20 15:14:23 -04:00
ffxbld
bc78cf0191
No bug, Automated HPKP preload list update from host bld-linux64-spot-477 - a=hpkp-update
2014-07-19 03:17:35 -07:00
ffxbld
a6a2bd935e
No bug, Automated HSTS preload list update from host bld-linux64-spot-477 - a=hsts-update
2014-07-19 03:17:32 -07:00
Alexandre Poirot
98afd25e0d
Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files; fix previous bustage on a CLOSED TREE, r=ahal
2014-07-02 15:40:56 -07:00
Jonathan Griffin
38f79ff899
Backout 4f6d9db92389 for bustage on a CLOSED TREE
2014-07-22 17:55:50 -07:00
Mike Hommey
622bf09730
Bug 1041864 - Remove LIBRARY_NAMEs that aren't used. r=mshal
2014-07-23 08:39:56 +09:00
Alexandre Poirot
37506aa45c
Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files. r=ahal
2014-07-02 15:40:56 -07:00
Camilo Viecco
2fb2490eb9
Bug 1004353 - Enable pinning for TOR websites. r=mmc
...
--HG--
extra : rebase_source : d880368dd9eaaafcde353ce187438ae074994bfa
2014-07-22 14:28:52 -07:00
Jed Davis
90ebf4e684
Bug 1037211 - Remove MOZ_CONTENT_SANDBOX_REPORTER by making it always true. r=kang r=ted
...
--HG--
extra : amend_source : 450d51dab077794e194bf407044de95627de0cde
2014-07-17 14:57:28 -07:00