Commit Graph

7895 Commits

Author SHA1 Message Date
Michael Shuen
f08198c634 Bug 933998 - Prevent leak in nsNSSCertificateDB::ConstructX509FromBase64. r=bsmith 2013-11-04 14:22:37 -05:00
Meadhbh Hamrick
b2b4678420 Bug 861266: Enable TLS 1.2 by default, r=briansmith
--HG--
extra : rebase_source : 4f28724d58791e1ee0e281ff48232f5aaca2048f
2013-11-01 04:48:57 -07:00
Brian Smith
c4d5fa5097 Bug 932176: Add preference to control whether OCSP GET is used, off by default, r=cviecco
--HG--
extra : rebase_source : 7cbc273155d04bc64a110eda9216c6f727ce0c18
2013-10-24 14:32:09 -07:00
Brian Smith
fcee792ee1 Bug 898431: Update NSS to NSS 3.15.3 Beta 2 (NSS_3_15_3_BETA2), r=me
--HG--
extra : rebase_source : e0c24dc8228477fc0647a9e1f534dcf96a355095
2013-11-01 04:08:28 -07:00
Brian Smith
7191d86258 Bug 934171: Fix OCSP stapling test, r=mcmanus
--HG--
extra : rebase_source : 4f77b595b2004dabf3444187424ac4426fb7a41a
2013-11-02 19:57:26 -07:00
ffxbld
5b40e294be No bug, Automated HSTS preload list update from host bld-linux64-ec2-406 - a=hsts-update 2013-11-02 03:19:53 -07:00
Mike Hommey
3da504d65e Bug 933135 - Treat SIMPLE_PROGRAMS more like PROGRAM. r=mshal 2013-11-02 08:43:55 +09:00
Brian R. Bondy
71d02b0488 Bug 925571 - Packaging for Sandboxing dll. r=bsmedberg 2013-10-30 16:58:56 -07:00
Brian R. Bondy
eba93af7a1 Bug 925571 - Initial Windows content process sandbox broker code. r=aklotz 2013-10-30 16:58:52 -07:00
Brian R. Bondy
4c0646b2d2 Bug 925571 - Build config for plugin_container windows sandboxing. r=bsmedberg 2013-10-30 16:58:45 -07:00
Brian Smith
d7c650a645 Bug 733647: Enable TLS 1.1 by default, r=wtc
--HG--
extra : rebase_source : 539406fa06a715e60d84b207a6112257262817f6
2013-10-26 01:01:37 -07:00
David Keeler
7af4d46f21 bug 930209 - differentiate empty OCSP response from no OCSP response in tests r=cviecco 2013-10-28 13:15:53 -07:00
Brian R. Bondy
e4698a14ab Bug 922756 - Changes to import of Chromium sandbox so that it's buildable. r=aklotz 2013-10-28 14:54:46 -07:00
Brian R. Bondy
52aea6cfef Bug 922756 - Initial import of subset of Chromium sandbox. r=aklotz 2013-10-28 14:54:42 -07:00
Brian R. Bondy
de45bd4422 Bug 922756 - Build config for Chromium sandbox. r=bsmedberg
--HG--
rename : security/sandbox/LICENSE => security/sandbox/linux/LICENSE
rename : security/sandbox/Makefile.in => security/sandbox/linux/Makefile.in
rename : security/sandbox/Sandbox.cpp => security/sandbox/linux/Sandbox.cpp
rename : security/sandbox/Sandbox.h => security/sandbox/linux/Sandbox.h
rename : security/sandbox/android_arm_ucontext.h => security/sandbox/linux/android_arm_ucontext.h
rename : security/sandbox/android_i386_ucontext.h => security/sandbox/linux/android_i386_ucontext.h
rename : security/sandbox/android_ucontext.h => security/sandbox/linux/android_ucontext.h
rename : security/sandbox/arm_linux_syscalls.h => security/sandbox/linux/arm_linux_syscalls.h
rename : security/sandbox/linux_seccomp.h => security/sandbox/linux/linux_seccomp.h
rename : security/sandbox/linux_syscalls.h => security/sandbox/linux/linux_syscalls.h
rename : security/sandbox/moz.build => security/sandbox/linux/moz.build
rename : security/sandbox/seccomp_filter.h => security/sandbox/linux/seccomp_filter.h
rename : security/sandbox/x86_32_linux_syscalls.h => security/sandbox/linux/x86_32_linux_syscalls.h
rename : security/sandbox/x86_64_linux_syscalls.h => security/sandbox/linux/x86_64_linux_syscalls.h
2013-10-28 14:54:36 -07:00
Brian R. Bondy
35c298f670 Bug 931429 - Fix PR_LOG compiling error for sandbox code on Linux. r=kang 2013-10-28 14:42:26 -07:00
Birunthan Mohanathas
145d3ff4f2 Bug 784739 - Switch from NULL to nullptr in security/; r=ehsan 2013-10-28 10:05:19 -04:00
Eddy Bruel
359289b5e5 Bug 880330 - Refactor crypto to use the new options API; r=bholley 2013-10-28 12:57:08 +01:00
Phil Ringnalda
951d073394 Merge m-c to m-i 2013-10-26 11:19:17 -07:00
ffxbld
a99bd4efd6 No bug, Automated HSTS preload list update from host bld-linux64-ec2-441 - a=hsts-update 2013-10-26 03:17:16 -07:00
Mike Hommey
b000a846c2 Bug 929905 - Consolidate sources in moz.build. r=gps 2013-10-25 08:23:05 +09:00
Brian Smith
3842b267a1 Bug 754356: Remove TLS intolerance timeout logic, r=honzab
--HG--
extra : rebase_source : 49c4563800ce9727e11e08d857db44c1294a074b
2013-10-15 01:14:50 -07:00
Brian Smith
50c4793f62 Backed out changeset 673ca84a9171 because of wrong bug number in commit message
--HG--
extra : rebase_source : 32c92c4cb98097caf8805fdae98d9c435580c8c9
2013-10-26 00:51:47 -07:00
Brian Smith
bdc5f15a1f Bug 450280: Remove timeout logic for TLS intolerance, r=honzab 2013-10-15 01:14:50 -07:00
Patrick Wang
5f3a169c05 Bug 881761 - Part 2: Exposing configureMD5 in nsNSSComponent. r=bsmith 2013-10-11 11:27:51 +08:00
Patrick Wang
5243e79ada Bug 881761 - Part 1: Move initializing cipher suite to public function. r=keeler,honzab 2013-09-17 15:29:15 +08:00
Brian O'Keefe
9c9d71fddb Bug 928709 - Convert chromium-config.mk to mozbuild, r=mshal 2013-10-02 13:17:55 -04:00
Michael Harrison
52fc47f2da Bug 917049 - Remove the security.enable_tls_session_tickets pref. r=keeler 2013-10-22 12:33:00 +01:00
Carsten "Tomcat" Book
0e4e01758c Merge mozilla-inbound to Mozilla-Central 2013-10-24 07:05:29 +02:00
Mike Hommey
59a17d0f20 Bug 921492 - Make StrictOrderingOnAppendList use actual alphabetical sorting. r=mshal,r=gps 2013-10-24 08:05:43 +09:00
Mike Hommey
3fa7456cd6 Bug 913268 - Make CPP_SOURCES a StrictOrderingOnAppendList. r=mshal 2013-10-24 08:00:23 +09:00
Paolo Amadini
cd2ba67f77 Bug 928349 - Add a build-time setting to use only the JavaScript API for downloads, and enable it in Firefox for Desktop. r=enn 2013-10-23 21:46:47 +02:00
Camilo Viecco
d331acd967 Bug 918120: reduce soft fail ocsp timeouts to 3 secs. r=bsmith. 2013-09-23 09:25:53 -07:00
Camilo Viecco
9cdbcf49ca Bug 911336: nsNSSCertificateDB does not lock nssShutdown correctly. r=keeler. 2013-08-29 16:15:35 -07:00
Ms2ger
788668d2c2 Bug 908142 - Part b: Move FAIL_ON_WARNINGS to moz.build in security/sandbox/; r=gps 2013-10-20 09:25:19 +02:00
ffxbld
b7bc539e69 No bug, Automated HSTS preload list update from host bld-linux64-ec2-326 - a=hsts-update 2013-10-19 03:22:40 -07:00
Camilo Viecco
9216b8ad8d Bug 895601: Add tests to cert verification in psm. r=keeler. 2013-07-30 11:18:40 -07:00
Chris Peterson
ab0945ca8d Bug 927209 - Fix -Wunused-function and -Wreorder warnings in nsNSSIOLayer.cpp. r=bsmith 2013-10-15 16:22:13 -07:00
Mike Hommey
ca1b5bf42a Bug 926906 - Kill core_abspath, core_realpath and core_winabspath. r=gps 2013-10-17 07:55:16 +09:00
Mike Hommey
0547bcf728 Bug 925605 - Allow to build with a special build of GNU make on windows. r=gps 2013-10-16 08:34:18 +09:00
Wes Kocher
1ec4cf1ebf Backed out changeset 5f0bfb16fa4a (bug 925605) 2013-10-15 16:57:00 -07:00
Mike Hommey
616f4b2735 Bug 925605 - Allow to build with a special build of GNU make on windows. r=gps 2013-10-16 08:34:18 +09:00
Brian Smith
71db6985d3 Bug 839310: Expand TLS intolerance logic to work for versions beyond TLS 1.0, r=keeler, r=wtc
--HG--
extra : rebase_source : b83a610d08abb428f0f6894fa935712f820ddfe8
2013-10-11 00:17:19 -07:00
ffxbld
90e84c8792 No bug, Automated HSTS preload list update from host bld-linux64-ec2-391 - a=hsts-update 2013-10-12 03:18:11 -07:00
Ed Morley
ad67fba436 Backed out changeset cff5a22acb7c (bug 924992) for breaking upload_symbolds on Nightlies 2013-10-11 17:49:25 +01:00
Honza Bambas
fda9e3c937 Bug 923248 - Fix typo in proxy/direct NTLM module telemetry accumulation, r=jduell 2013-10-10 19:10:45 +02:00
Mike Hommey
afd5566358 Bug 924992 - Use an absolute path for DIST; r=gps 2013-10-10 18:00:44 +09:00
Jed Davis
d613247079 Bug 912822 - Enable sandbox logging on Android without setting NSPR_LOG_MODULES. r=kang 2013-10-06 15:15:50 -04:00
Phil Ringnalda
fb530eed04 Merge m-i to m-c 2013-10-05 17:39:34 -07:00
ffxbld
10fcd4943f No bug, Automated HSTS preload list update from host bld-linux64-ec2-165 - a=hsts-update 2013-10-05 03:24:02 -07:00
Jed Davis
2282623604 Bug 919090 - Let content processes use sigaction and tgkill if profiling enabled. r=kang 2013-10-04 13:29:48 -04:00
Ms2ger
4c35b806f8 Merge m-c to inbound. 2013-10-03 11:09:17 +02:00
Ms2ger
f4153f40d4 Bug 900980 - Part a: Move unconditional assignments to EXPORT_LIBRARY to moz.build; rs=gps 2013-10-03 09:11:13 +02:00
Ms2ger
d1e1fda3b3 Bug 922288 - Remove some unnecessary boilerplate from Makefile.ins; r=mshal 2013-10-03 09:10:00 +02:00
Ms2ger
1ee1f27aa3 Bug 922268 - Remove empty makefiles; r=gps 2013-10-03 09:10:00 +02:00
Gregory Szorc
54c1de66d6 Bug 920223 - Part 3: Mass convert MOCHITEST_BROWSER_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:06 +02:00
Gregory Szorc
e6acf6270f Bug 920223 - Part 2: Mass convert MOCHITEST_CHROME_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:01 +02:00
Gregory Szorc
1cff342d15 Bug 920223 - Part 1: Mass convert MOCHITEST_FILES to manifests; rs=Ms2ger 2013-09-30 09:51:57 +02:00
Ed Morley
18a411a55c Backed out changeset 77bff106b704 (bug 920223) 2013-09-30 12:50:12 +01:00
Ed Morley
53a451894a Backed out changeset 68b6b152f51a (bug 920223) 2013-09-30 12:50:09 +01:00
Ed Morley
2c7dd24541 Backed out changeset 8b02873ee07e (bug 920223) 2013-09-30 12:50:05 +01:00
Gregory Szorc
8344d8a946 Bug 920223 - Part 3: Mass convert MOCHITEST_BROWSER_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:06 +02:00
Gregory Szorc
0b4364c6f3 Bug 920223 - Part 2: Mass convert MOCHITEST_CHROME_FILES to manifests; rs=Ms2ger 2013-09-30 09:52:01 +02:00
Gregory Szorc
6ed63cb064 Bug 920223 - Part 1: Mass convert MOCHITEST_FILES to manifests; rs=Ms2ger 2013-09-30 09:51:57 +02:00
David Keeler
21ea0c9304 bug 914034 - cache stapled OCSP responses on the cert verification thread r=briansmith 2013-10-02 15:08:07 -07:00
Ehsan Akhgari
8b1e734ef4 Backed out changeset a73ffb0d0c97 because of build bustage 2013-09-29 17:20:07 -04:00
Ehsan Akhgari
f3d364af5a Remove a number of unused variables, no bug 2013-09-29 16:42:12 -04:00
ffxbld
c58a40cd97 No bug, Automated HSTS preload list update from host bld-linux64-ec2-318 - a=hsts-update 2013-09-28 03:30:01 -07:00
Wes Kocher
d970705962 Merge b2g-inbound to m-c 2013-09-27 19:35:44 -07:00
Martijn Wargers
a3d1617473 Bug 918604 - Remove more enablePrivilege calls. r=jmaher 2013-09-25 19:32:20 +02:00
Ryan VanderMeulen
df60bfed7e Backed out changeset 356ba083bb5f (bug 918604) for frequent OSX test_window_bar.html timeouts.
CLOSED TREE
2013-09-27 18:28:43 -04:00
Jan Jongboom
54abab3203 Bug 906096 - Move InputMethod API behind a pref instead of build option. r=kanru, r=sicking
--HG--
rename : b2g/components/Keyboard.jsm => dom/inputmethod/Keyboard.jsm
rename : b2g/components/MozKeyboard.js => dom/inputmethod/MozKeyboard.js
2013-09-26 03:38:41 +08:00
Ryan VanderMeulen
1286b0b31d Merge fx-team to m-c. 2013-09-26 21:36:35 -04:00
David Keeler
2deb764710 bug 914716 - get seccomp-bpf sandboxing to compile on x86_64 r=kang 2013-09-25 11:14:34 -07:00
patilkr24@gmail.com
7e9fa43e66 Bug 898712 - Add an error category to SSL errors in the browser console. r=bsmith 2013-09-26 14:07:29 -04:00
Brian Smith
faaf3281fa Bug 920248: Temporarily disable TLS false start, r=keeler, r=wtc
--HG--
extra : rebase_source : 4fc35de2d6e2dc99de11b2a2d0c0f3ebe1de8b97
2013-09-25 12:00:36 -07:00
Martijn Wargers
01fd8c8bbd Bug 918604 - Remove more enablePrivilege calls. r=jmaher 2013-09-25 19:32:20 +02:00
Gregory Szorc
7bd3c0ae36 Bug 901990 - Part 2: Upgrade xpcshell manifests; r=ted
--HG--
rename : toolkit/mozapps/extensions/test/xpcshell-unpack/head_unpack.js => toolkit/mozapps/extensions/test/xpcshell/head_unpack.js
2013-09-24 11:50:08 -07:00
Ehsan Akhgari
7233ba7103 Bug 918923 - Part 2: Switch to #including nsString.h in code using the internal strings API; r=bsmedberg 2013-09-23 13:25:00 -04:00
ffxbld
5dc03e6e7b No bug, Automated HSTS preload list update from host bld-linux64-ec2-437 - a=hsts-update 2013-09-21 03:30:50 -07:00
Benoit Jacob
229d2760cd Bug 913847 - Include MainThreadUtils.h instead of nsThreadUtils.h - r=ehsan 2013-09-19 09:54:42 -04:00
Wes Kocher
0b90687d1e Backed out changeset 040522aacba4 (bug 913847) 2013-09-18 17:18:56 -07:00
Wan-Teh Chang
eadac22acc Bug 898431: Update to NSS_3_15_2_BETA2. Inclues the fixes for bug 912844,
bug 912847, and bug 900971.
2013-09-18 17:10:00 -07:00
Nicholas Cameron
49d9b06e6c bug 918119. Skip crashtests/327524-1.html. r=bustage 2013-09-19 11:04:52 +12:00
Benoit Jacob
5526ea7b69 Bug 913847 - Include MainThreadUtils.h instead of nsThreadUtils.h - r=ehsan 2013-09-18 18:50:32 -04:00
Camilo Viecco
d5158d67a8 Bug 916226: Enable ecdhe AES128 CGM ciphers in psm now that nss support them. r=bsmith
--HG--
extra : rebase_source : 82379823637ef6cda9ffd8765881ff30a76b5b46
2013-09-16 15:43:05 -07:00
ffxbld
8561bc0434 No bug, Automated HSTS preload list update from host bld-linux64-ec2-101 - a=hsts-update 2013-09-14 03:31:07 -07:00
Cykesiopka
19a28af708 Bug 733644 - Make nsNSSComponent use mozilla::Preferences. r=keeler, sr=bsmith 2013-09-13 09:02:15 -04:00
Ryan VanderMeulen
a50e4cbbf3 Backed out changeset 38a63dbeab37 (bug 733644) for suspicion of causing test_bug798843_pref.html failures. 2013-09-13 10:47:38 -04:00
Cykesiopka
5f525a4004 Bug 733644 - Make nsNSSComponent use mozilla::Preferences. r=keeler, sr=bsmith 2013-09-13 09:02:15 -04:00
Paolo Amadini
a78cae2649 Bug 913118 - Add a combined list of public and private downloads. r=enn 2013-09-12 21:20:30 +02:00
Brian Smith
ca0fb01dd1 Bug 909152: Factor out generic logic from OCSP stapling tests to make it reusable, r=keeler, r=cviecco, r=gps
--HG--
extra : rebase_source : 147591c1f12494cdda17e96a4993223297f6dc1a
2013-09-04 23:55:28 -07:00
Vicamo Yang
f88086df70 Bug 909658: B2G emulator-x86 has no __NR_{recv,msgget,semget}. r=kang 2013-09-11 00:23:35 +08:00
Kyle Huey
888aba875b Bug 910937: Remove xpc_UnmarkGrayObject and use JSAPI directly. r=mccr8 2013-09-08 20:28:48 -07:00
ffxbld
61d2aa431c No bug, Automated HSTS preload list update from host bld-linux64-ec2-142 - a=hsts-update 2013-09-07 03:36:29 -07:00
Jed Davis
bc85533cf4 Bug 908907 - Fill in gaps in seccomp-bpf whitelist for b2g. r=kang, r=bsmith
Relatively harmless syscalls:
* dup, used by mozilla::ipc::Shmem
* getuid, for android::IPCThreadState, used in audio decode
* nanosleep, used by android::AudioTrack

Of potential concern:
* sched_setscheduler, used by audio threads in e.g. CubeVid
  This might be restrictable somewhat by inspecting its arguments.

Of serious concern:
* unlink, as a workaround for bug 906996 (q.v.).

Note that we already allow open(), including for writing (temporary
files, /dev/genlock on qcom devices, probably more), so allowing unlink
won't make the situation much worse.
2013-09-06 09:13:59 -04:00
Robert O'Callahan
03e7828db2 Bug 910989. Remove nsTHashtable::Init, fallible allocation, and MT hashtables. r=ehsan,bsmedberg
--HG--
extra : rebase_source : 0787130b1814c74bfb38dc178de94022f0b2e64e
2013-09-02 20:41:57 +12:00
Mike Hommey
f8bc7fa754 Bug 912293 - Remove now redundant boilerplate from Makefile.in. r=gps 2013-09-05 09:01:46 +09:00
David Keeler
dad3672925 bug 912204 - properly clear HSTS state in browser_bug627234_perwindowpb.js r=cviecco 2013-09-03 13:43:07 -07:00
Masatoshi Kimura
e06d8f88fa Bug 911573 - Mochitest fixup to prepare removing Components-in-content with UniversalXPConnect. r=bholley 2013-09-05 01:02:34 +09:00