Commit Graph

8764 Commits

Author SHA1 Message Date
Brian Smith
d08286d3d3 Bug 1053617: Reduce scope of DER encoding debugging logic to the file it is used in, r=keeler
--HG--
extra : rebase_source : c22f7e96dfdd1997626769ac03c6d189321eec1a
2014-08-04 19:07:26 -07:00
Brian Smith
9a2a60943d Bug 1053616: Remove uses of PR_SetError from mozilla::pkix tests, r=keeler
--HG--
extra : rebase_source : 1fc7ce9ab400c39e3c4afb68940be93cc2a0b848
2014-08-13 17:50:42 -07:00
Cykesiopka
f4a67332e8 Bug 1052257 - Add and use error code specific to inadequate key sizes. r=keeler 2014-08-12 22:24:00 -04:00
Jed Davis
1c8a8d2d9b No bug - Add trailing newlines for non-Android Linux sandbox logging. r=kang
--HG--
extra : rebase_source : c0e936b62289c0e5eecad41fce9afac881fe4667
2014-08-14 15:39:14 -07:00
David Keeler
c3d3df58ac bug 1030963 - remove non-standard window.crypto functions/properties r=jst r=briansmith r=glandium 2014-08-14 09:38:42 -07:00
Brian Smith
3e57ff4e5a Bug 1048642, Part 3: Remove SECStatus GTest utilities, r=cviecco
--HG--
extra : rebase_source : f77202ad8d271604d7620cc5f704a51338c356ab
2014-08-03 22:45:05 -07:00
Brian Smith
065cf239b1 Bug 1048642, Part 2: Change GenerateKeyPair return type from SECStatus to Result, r=cviecco
--HG--
extra : rebase_source : 652277e952d224175ea57d4509124ff8180440cb
2014-08-04 10:59:21 -07:00
Brian Smith
4a58c8b13e Bug 1048642, Part 1: Change TamperOnce return type from SECStatus to Result, r=cviecco
--HG--
extra : rebase_source : 1d2e8014153d8bfc6f9008dd9b6b9e4d5ac5dcb7
2014-08-03 22:49:10 -07:00
Kai Engert
bca16ce1ed Bug 1049006 - Update Mozilla 33 to use NSS 3.17 final and NSPR 4.10.7 final, r=wtc 2014-08-13 21:47:00 +02:00
Jed Davis
033a6785eb Bug 1043733 - Require sandboxing to load Gecko Media Plugins on Linux. r=jesup r=kang
Also refactors how sandbox support and disabling are handled, and allows
simulating a lack of sandbox support with an env var (for testing
without rebuilding a kernel).
2014-08-12 21:28:27 -07:00
David Keeler
3d57f23fab bug 1040446 - mozilla::pkix: add error code for CA cert used as end-entity cert r=briansmith 2014-08-11 12:35:45 -07:00
Brian Smith
9c4276d25b Bug 1048070, Part 2: Remove uses of PR_NOT_REACHED and PR_ARRAY_SIZE in mozilla::pkix, r=keeeler
--HG--
extra : rebase_source : d373a7526c1048770bed8bacb7e14c8f10e832cb
2014-08-03 18:24:35 -07:00
Brian Smith
3f64294312 Bug 1048070, Part 1: Replace uses of PR_ASSERT in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 3f1dbb4babb6d575bde3088c92aeb6f28d689210
2014-08-02 09:17:59 -07:00
Brian Smith
ea0e98acf5 Bug 1042479: Accept the OIW sha1WithRSASignature OID, r=keeler
--HG--
extra : rebase_source : 98dfbf1b5130898604e86c54ad4a8453aa87bde4
2014-08-04 16:34:47 -07:00
Patrick McManus
b82e230f36 bug 1040323 - SecureBrowserUI needs to consider scheme, not just security of connection r=dkeeler 2014-07-28 14:37:41 -04:00
Ryan VanderMeulen
0e89667592 Merge inbound to m-c. a=merge 2014-08-09 11:19:46 -04:00
ffxbld
40f698d0cb No bug, Automated HPKP preload list update from host bld-linux64-spot-011 - a=hpkp-update 2014-08-09 03:14:42 -07:00
ffxbld
509bcaeb60 No bug, Automated HSTS preload list update from host bld-linux64-spot-011 - a=hsts-update 2014-08-09 03:14:40 -07:00
Wes Kocher
98f9eac6dd Merge m-c to inbound on a CLOSED TREE 2014-08-08 14:15:34 -07:00
Steven Michaud
844fdf04eb Bug 1012949 - Sandbox the OpenH264 plugin for Mac r=rjesup,areinald,ted a=PatchNeedsToLandToday 2014-08-08 11:55:22 -05:00
J. Ryan Stinnett
ce8794da11 Bug 1040130 - Allow specifying a client cert for sockets. r=keeler, r=mcmanus 2014-08-07 16:32:00 -04:00
Nicholas Nethercote
a7cf4142b4 Bug 1050009 - Initialize pldhash tables with a length, not a capacity. r=roc.
* * *
imported patch rm-dummy-params

--HG--
extra : rebase_source : c25987eb11bae197218d5fc53b77def19afa36ac
2014-08-06 06:31:21 -07:00
Georgios Kontaxis
9bddbaa73e Bug 1048643: extended nsDocShell with flags to indicate tracking protection status (similar to mixed content blocked/loaded status) 2014-08-07 13:35:03 -07:00
David Keeler
14eafa8e5d Bug 1036546 - Soft-disable proprietary window.crypto functions via the pref dom.unsafe_legacy_crypto.enabled. r=smaug 2014-08-05 10:48:24 -07:00
Mike Hommey
89777800f9 Bug 1047267 - Move remaining OS_LIBS and EXTRA_LIBS to moz.build. r=gps
* * *
Bug 1047267 - To fold with "Move remaining OS_LIBS and EXTRA_LIBS to moz.build"
2014-08-07 14:21:03 +09:00
Mike Hommey
e8b438350d Bug 1049281 - Move third-party build system "drivers" to config/external, and stop using static dirs. r=gps
--HG--
rename : intl/icu/Makefile.in => config/external/icu/Makefile.in
rename : config/nspr/Makefile.in => config/external/nspr/Makefile.in
rename : config/nspr/moz.build => config/external/nspr/moz.build
rename : security/build/Makefile.in => config/external/nss/Makefile.in
rename : security/build/moz.build => config/external/nss/moz.build
rename : security/build/nspr-dummy.def => config/external/nss/nspr-dummy.def
rename : security/build/nss.def => config/external/nss/nss.def
rename : security/build/nss.mk => config/external/nss/nss.mk
2014-08-07 02:58:52 +09:00
Mike Hommey
4a01b3b147 Bug 1048993 - Use nsinstall from $(topobjdir)/config instead of $(DIST)/bin to avoid races when make wants to reinstall it for some reason. r=mshal 2014-08-07 02:58:50 +09:00
Nathan Froyd
e1583db863 Bug 1042226 - move DEFINES += -DAB_CD=$(AB_CD) pattern into config.mk; r=mshal 2014-08-01 12:53:05 -04:00
Monica Chew
afefa8ea41 Bug 1047560: Enable pinning on dropbox (r=keeler) 2014-08-01 13:12:38 -07:00
Mike Hommey
d9443ec932 Bug 1045783 - Move most OS_LIBS to moz.build and do some related cleanup. r=mshal 2014-08-06 07:25:33 +09:00
Kai Engert
a5a24cc8bb Bug 1049006 - Update Mozilla to use NSS 3.17, r=wtc 2014-08-05 22:22:19 +02:00
Ehsan Akhgari
7257b2f870 Bug 579517 follow-up: Remove NSPR types that crept in 2014-08-08 08:39:07 -04:00
Martin Thomson
d926cc34de Bug 996237 - Fix nss.def for Android/B2G. r=wtc 2014-08-04 11:51:00 -04:00
Ehsan Akhgari
0403683a4f Bug 1047782 - Fix some bad impliciit constructors in netwerk/; r=mcmanus 2014-08-05 09:20:50 -04:00
Jed Davis
b0bd63525b Bug 1047620 - Fix sandboxing for B2G --disable-jemalloc builds. r=kang
--HG--
extra : rebase_source : 1b2ec6491277a9dc451ab767d8563076cf522c27
2014-08-04 15:11:33 -07:00
Jed Davis
9d31844f0c Bug 1012951 - Add Linux sandboxing for GeckoMediaPlugin processes. r=kang r=ted
--HG--
extra : rebase_source : 1b890000d5b8d2a8954cdd1118a1023eba829c29
2014-08-04 15:11:18 -07:00
Jed Davis
d2d145dc65 Bug 1046541 - Use stdio for non-Android Linux sandbox error messages. r=kang
--HG--
extra : rebase_source : e93a4a76f8188d715886e263a366d694c28b4525
2014-08-04 15:11:04 -07:00
Eric Rahm
6fc80c7e16 Bug 1047176 - Part 1: Disable warning C4640 in certverifier. r=keeler
--HG--
extra : rebase_source : a608f8704f57312902b05258ff53a4d1f2010cbc
2014-08-04 11:29:25 -07:00
Patrick McManus
f8a14606da bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler 2014-08-04 16:54:10 -04:00
Ed Morley
9239e94fea Backed out changeset fa05c69d7de1 (bug 996237) 2014-08-04 15:34:15 +01:00
Martin Thomson
b3853a0865 Bug 996237 - Fix nss.def for Android/B2G. r=wtc 2014-08-01 14:44:00 -04:00
Ed Morley
606b89b834 Backed out changeset 972daa5dd3c5 (bug 1027720) for build failures 2014-08-04 14:33:14 +01:00
Patrick McManus
004b6798a9 bug 1027720 - enforce h2 requirement that sever uses aead r=hurley r=dkeeler 2014-08-01 16:59:00 -04:00
Ed Morley
7feeef7c09 Merge mozilla-central and inbound 2014-08-04 12:23:28 +01:00
Ed Morley
b17124bab9 Backed out changeset cabe3163d4bc (bug 1047560) for conflicting with the automated HPKP preload list update 2014-08-04 12:22:36 +01:00
Ed Morley
efe972f974 Merge latest green b2g-inbound changeset and mozilla-central; a=merge 2014-08-04 12:13:23 +01:00
ffxbld
a86bcdd47d No bug, Automated HPKP preload list update from host bld-linux64-spot-075 - a=hpkp-update 2014-08-02 03:22:22 -07:00
ffxbld
b2a536ffc2 No bug, Automated HSTS preload list update from host bld-linux64-spot-075 - a=hsts-update 2014-08-02 03:22:20 -07:00
Bob Owen
8c896093c8 Bug 1045646 - Part 2: Replace AutoPushJSContext in nsCryptoRunnable::Run. r=bholley 2014-08-01 09:00:58 +01:00
Brian Smith
0ccaf0860c Bug 1043041: Use mozilla::pkix::Time instead of PRTime, r=keeler
--HG--
extra : rebase_source : 2cc39d3c322c1355aad003f2497659a091febac2
2014-08-02 08:49:12 -07:00
Brian Smith
de725ae5ef Bug 1047792: Rely on mozilla::pkix to filter out expired certs instead of CERT_CreateSubjectCertList, r=keeler
--HG--
extra : rebase_source : 5182147037b69f0ac3c3cd060d6e2af71bfde2e7
2014-08-01 23:16:21 -07:00
Brian Smith
25a73829af Bug 1041344: Refactor mozilla::pkix::CheckCertificatePolicies, r=cviecco
--HG--
extra : rebase_source : d40184b986e9c6ed44c0b39a485292a91f924f13
2014-07-19 18:51:10 -07:00
Monica Chew
6eea93a408 Bug 1047560: Enable pinning on dropbox (r=keeler) 2014-08-01 13:12:38 -07:00
Jed Davis
9b70e225e5 Bug 1046525 - Allow get{e,}gid and sched_{g,s}etparam in sandboxed content processes. r=kang
Some of these were already in the desktop whitelist; those duplicates
are removed.

--HG--
extra : amend_source : 3ab4b50e3f1980b4d7b93cc17f34b926e2aa2396
2014-08-01 15:05:44 -07:00
Brian Smith
18c07f1b91 Bug 1041186, Part 3: More renaming, r=keeler
--HG--
extra : rebase_source : e4d70240f25f566c3bde91d515739bf46853fe8d
2014-07-31 20:55:52 -07:00
Brian Smith
d77dac0580 Bug 1041186, Part 2: Rename Input to Reader and InputBuffer to Input, r=keeler
--HG--
extra : rebase_source : bf57a9eb6ae5c122912e00a47156010e5ea99478
2014-07-31 12:17:31 -07:00
Brian Smith
ffe743ee06 Bug 1041186, Part 1: Improve buffer overflow protection in mozilla::pkix, r=keeler
--HG--
extra : rebase_source : 0f4a33f2c66594930ba9c79233648c70e33ba27c
2014-07-18 22:30:51 -07:00
Brian Smith
5f56fc60d6 Bug 1041343: Use references instead of pointers for TrustLevel output parameters, r=cviecco
--HG--
extra : rebase_source : d5c07dc29a95ccb75a7a8f199de26d43950b9ed4
2014-07-20 11:06:26 -07:00
Brian Smith
a95b2088a5 Bug 1039601: Use bounds-checked DERArray instead of plain arrays in pkixocsp.cpp, r=cviecco
--HG--
extra : rebase_source : cbe6257fc470069de0f7cb4f9f169550980a6b98
2014-07-16 09:54:10 -07:00
Brian Smith
c45dc156d1 Bug 1039064: Use strongly-typed enum instead of NSPR-style error handling, r=keeler
--HG--
extra : rebase_source : 4f3e41916cd7e2c74679d468eeeb702af3321532
2014-07-18 11:48:49 -07:00
Nathan Froyd
12c76f15f7 Bug 1042878 - part 2 - move MOZ_CAIRO_CFLAGS et al additions to C*FLAGS into moz.build; r=glandium 2014-07-24 11:55:33 -04:00
Andrew McCreight
426692835a Bug 1029151 - Remove dangerous public destructor of nsNSSCertificate. r=keeler 2014-07-30 13:00:29 -07:00
Andrew McCreight
14c7458527 Bug 1029150 - Remove dangerous public destructor of nsCryptoRunnable. r=keeler 2014-07-30 13:00:29 -07:00
Ed Morley
dcbfd040d1 Backed out changeset d50d7e88f35e (bug 1012951) for LSan failures 2014-07-30 16:49:43 +01:00
Jed Davis
8cff1bfff8 Bug 1012951 - Sandbox GMP plugins on Linux using seccomp-bpf. r=kang r=ted 2014-07-29 15:31:12 -07:00
Ehsan Akhgari
3fa82c9346 Bug 1045436 - Fix more bad implicit constructors in XPCOM; r=froydnj 2014-07-29 20:43:56 -04:00
Mike Hommey
c48f53e37a Bug 1043865 - Remove the remainder of compilation bits from the libs tier. r=gps 2014-07-29 08:59:27 +09:00
Mike Hommey
179299ea01 Bug 1043862 - Make the binaries target use the compile tier. r=gps 2014-07-29 08:58:28 +09:00
Mike Hommey
5f6ba110e6 Bug 1043802 - Remove TOOLS_DIRS and TEST_TOOLS_DIRS. r=gps 2014-07-29 08:55:55 +09:00
Carsten "Tomcat" Book
bcf40664e4 merge mozilla-inbound to mozilla-central a=merge 2014-07-28 15:32:36 +02:00
ffxbld
634832a160 No bug, Automated HPKP preload list update from host b-linux64-ix-0010 - a=hpkp-update 2014-07-26 03:16:45 -07:00
ffxbld
e56e203db4 No bug, Automated HSTS preload list update from host b-linux64-ix-0010 - a=hsts-update 2014-07-26 03:16:43 -07:00
Jed Davis
301d254a40 Bug 1017393 - Record rejected syscall number in crash dump. r=kang 2014-07-24 11:36:00 +02:00
David Keeler
67d0a99f3a bug 1040889 - don't re-cache OCSP server failures if no fetch was attempted r=briansmith r=cviecco
--HG--
extra : rebase_source : e00c84e62ecca3e97794d3ceafcd1f5f618045d1
2014-07-25 16:59:22 -07:00
Mike Hommey
a62cdc4fa7 Bug 1043344 - Move libraries and programs build to the compile tier. r=gps 2014-07-25 07:14:40 +09:00
Jeff Walden
235c1f7500 Bug 1037100 - Remove all use of ScopedDeleteArray from miscellaneous places. r=jcranmer
--HG--
extra : rebase_source : 937557b819742ee62e10a4afa6c5152b910cd8b2
2014-07-10 20:37:40 -07:00
Alexandre Poirot
7ea4dd517f Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files; fix previous bustage on a CLOSED TREE, r=ahal 2014-07-02 15:40:56 -07:00
Brian Smith
2544688b97 Bug 1041730: Remove unused parameters from PublicKeyPinningService, r=cviecco
--HG--
extra : rebase_source : 6a091a32ab5178899fc1f9ceb57614f4a87f25c3
2014-07-21 19:18:31 -07:00
Brian Smith
a2f498819e Bug 1039031: Print name of server in TLS/OCSP tests, r=cviecco
--HG--
extra : rebase_source : 4d5ae2bdd920f29c6f820b6daf035ddb12406b12
2014-07-15 16:58:31 -07:00
Marco Castelluccio
3236b9594b Bug 1021345 - Allow apps to be installed from the Marketplace staging server. r=fabrice 2014-07-23 13:20:25 +02:00
Mike Hommey
7cab62150a Bug 1041936 part 2 - Directly use the static library "xul" to link into "xul-gtest" instead of having an intermediate library "xul" used by "xul-shared" and "xul-gtest". r=gps 2014-07-23 13:33:09 +09:00
Mike Hommey
95063176fa Bug 1036894 part 9 - Replace all EXTRA_DSO_LDOPTS, SHARED_LIBRARY_LIBS and LIBS with EXTRA_LIBS, OS_LIBS or OS_LDFLAGS, appropriately. r=gps
OS_LIBS for libraries that are not part of the gecko tree, EXTRA_LIBS for
libraries, such as NSPR, that are in the tree, but are not handled by
moz.build just yet. Those EXTRA_LIBS may also come from a system library.
However, in cases where the expanded variables are always empty for the
in-tree case, OS_LIBS is used (as for, e.g. MOZ_ZLIB_LIBS). OS_LDFLAGS is
used exclusively for non-library linker flags.

Always pass EXTRA_LIBS before OS_LIBS on linker command lines.

Forbid EXTRA_DSO_LDOPTS, SHARED_LIBRARY_LIBS and LIBS in Makefiles.
2014-07-23 13:31:02 +09:00
Mike Hommey
5fab42fcaf Bug 1036894 part 8 - Move most in-tree library linkage information to moz.build, as USE_LIBS. r=gps 2014-07-23 13:30:52 +09:00
Mike Hommey
6d6d400ea1 Bug 1036894 part 6 - Emit SimplePrograms for CPP_UNIT_TESTs, and make the corresponding moz.build config look like that of SIMPLE_PROGRAMS. r=gps 2014-07-23 13:29:44 +09:00
Mike Hommey
a33d7d67e6 Bug 1036894 part 1 - Move MAKE_FRAMEWORK, SDK_LIBRARY, SHARED_LIBRARY_NAME and STATIC_LIBRARY_NAME to moz.build. r=gps
At the same time, make the Library data more useful in the build frontend.
2014-07-23 13:29:09 +09:00
Wes Kocher
be4af0e0fd Merge m-c to inbound 2014-07-22 18:39:17 -07:00
Jonathan Griffin
1c5d8636ac Backed out changeset 64586374a208 on a CLOSED TREE 2014-07-22 18:29:57 -07:00
Jim Mathies
e5f4ec183a Bug 948574 - Provide limited access to nsISiteSecurityService apis in the child, and prevent the direct creation of nsISiteSecurityService. r=bz, sr=ptheriault, original author: David Keeler <dkeeler@mozilla.com> 2014-07-22 07:17:45 -05:00
Ehsan Akhgari
a50127383b Bug 1041325 - Use intrin.h for _ReturnAddress in the chromium sandbox code; r=bbondy
--HG--
extra : rebase_source : 06bb642636a9f3df2e75eb950816a7d48da85faf
2014-07-20 19:05:44 -04:00
Ehsan Akhgari
da7f65d605 Backed out changeset 4b792c35d0be (bug 1041325) because of build bustage 2014-07-20 19:19:05 -04:00
Ehsan Akhgari
006ec45925 Bug 1041325 - Use intrin.h for _ReturnAddress in the chromium sandbox code; r=bbondy 2014-07-20 19:05:44 -04:00
Ryan VanderMeulen
21d58ba963 Merge m-c to inbound. a=merge 2014-07-20 15:14:23 -04:00
ffxbld
bc78cf0191 No bug, Automated HPKP preload list update from host bld-linux64-spot-477 - a=hpkp-update 2014-07-19 03:17:35 -07:00
ffxbld
a6a2bd935e No bug, Automated HSTS preload list update from host bld-linux64-spot-477 - a=hsts-update 2014-07-19 03:17:32 -07:00
Alexandre Poirot
98afd25e0d Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files; fix previous bustage on a CLOSED TREE, r=ahal 2014-07-02 15:40:56 -07:00
Jonathan Griffin
38f79ff899 Backout 4f6d9db92389 for bustage on a CLOSED TREE 2014-07-22 17:55:50 -07:00
Mike Hommey
622bf09730 Bug 1041864 - Remove LIBRARY_NAMEs that aren't used. r=mshal 2014-07-23 08:39:56 +09:00
Alexandre Poirot
37506aa45c Bug 1027242 - Blacklist mulet's failing tests + expose 'mulet' to ini files. r=ahal 2014-07-02 15:40:56 -07:00
Camilo Viecco
2fb2490eb9 Bug 1004353 - Enable pinning for TOR websites. r=mmc
--HG--
extra : rebase_source : d880368dd9eaaafcde353ce187438ae074994bfa
2014-07-22 14:28:52 -07:00
Jed Davis
90ebf4e684 Bug 1037211 - Remove MOZ_CONTENT_SANDBOX_REPORTER by making it always true. r=kang r=ted
--HG--
extra : amend_source : 450d51dab077794e194bf407044de95627de0cde
2014-07-17 14:57:28 -07:00