Commit Graph

17046 Commits

Author SHA1 Message Date
Noemi Erli
d637b3f05e Backed out 24 changesets (bug 1824465) for causing failures in nsISupportsImpl.cpp CLOSED TREE
Backed out changeset a5c8f22b7170 (bug 1824465)
Backed out changeset b551b655ac72 (bug 1824465)
Backed out changeset 0e6768a6419c (bug 1824465)
Backed out changeset fb115ebb7fe0 (bug 1824465)
Backed out changeset aaa7a2c8aa3b (bug 1824465)
Backed out changeset 7ef94bfa90b3 (bug 1824465)
Backed out changeset a4238fd6b86f (bug 1824465)
Backed out changeset 3a88e4cfbe45 (bug 1824465)
Backed out changeset 40c2467d3162 (bug 1824465)
Backed out changeset 8f900395c72c (bug 1824465)
Backed out changeset 92e4c6e4d73c (bug 1824465)
Backed out changeset 445c5d5d9661 (bug 1824465)
Backed out changeset de51ed5389d9 (bug 1824465)
Backed out changeset 72049d72bcb6 (bug 1824465)
Backed out changeset 126773c2427a (bug 1824465)
Backed out changeset 886e76bc80be (bug 1824465)
Backed out changeset a69a851411f0 (bug 1824465)
Backed out changeset 703599cf6189 (bug 1824465)
Backed out changeset 11ecb78ebc15 (bug 1824465)
Backed out changeset 563255aaa1e1 (bug 1824465)
Backed out changeset d1bf32c2a6c6 (bug 1824465)
Backed out changeset ef28b2777487 (bug 1824465)
Backed out changeset a2015d354bb1 (bug 1824465)
Backed out changeset 31d6b53fdc6a (bug 1824465)
2023-04-06 01:50:55 +03:00
Nika Layzell
e1bf44d9b8 Bug 1824465 - Part 21: Make PRemoteSandboxBroker refcounted, r=ipc-reviewers,mccr8
Differential Revision: https://phabricator.services.mozilla.com/D173736
2023-04-05 21:33:44 +00:00
Nika Layzell
7504c564fc Bug 1824465 - Part 20: Make PSandboxTesting refcounted, r=ipc-reviewers,mccr8
Differential Revision: https://phabricator.services.mozilla.com/D173735
2023-04-05 21:33:44 +00:00
Jed Davis
bb633f7e44 Bug 1825682 - Avoid truncating the pids in Linux sandbox broker thread names. r=gcp
Differential Revision: https://phabricator.services.mozilla.com/D174199
2023-04-03 19:47:31 +00:00
ffxbld
f9012aac66 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D174455
2023-04-03 13:34:12 +00:00
Chris H-C
fe6d4dbee4 Bug 1824682 - Add /dev/urandom to rdd process sandbox on Linux r=gcp
On Linuxen without getrandom(), Rust (and Firefox broadly) uses /dev/urandom
as a fallback. Rust uses it for a few things, notably hashmaps... and will
panic if it can't use it.

Differential Revision: https://phabricator.services.mozilla.com/D174336
2023-03-31 20:47:16 +00:00
Mike Hommey
15f47ffb40 Bug 1825696 - Update in-tree crates to env_logger 0.10. r=emilio
Differential Revision: https://phabricator.services.mozilla.com/D174207
2023-03-31 07:20:15 +00:00
Mike Hommey
93784bacca Bug 1825478 - Update bindgen to 0.64. r=emilio,necko-reviewers,supply-chain-reviewers,valentin
Differential Revision: https://phabricator.services.mozilla.com/D174054
2023-03-30 21:05:14 +00:00
Nika Layzell
d57c9498f6 Bug 1825360 - Remove the NS_DISPATCH_SYNC flag, r=necko-reviewers,geckoview-reviewers,media-playback-reviewers,karlt,jesup,m_kato,emilio
This flag is not supported by most event targets and can have unexpected
side effects (namely spinning a nested event loop). All consumers have
been replaced with a new function which is more explicit about this side
effect.

Differential Revision: https://phabricator.services.mozilla.com/D173985
2023-03-30 16:53:51 +00:00
ffxbld
fda4e5aac6 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D174105
2023-03-30 12:49:31 +00:00
ffxbld
bde19f5f7a No Bug, mozilla-central repo-update HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D173662
2023-03-27 16:06:47 +00:00
Mark Banner
36ab6611df Bug 1824173 - Enable ESLint configuration valid-jsdocs across the tree, disabling for currently failing locations. r=mossop,webcompat-reviewers,extension-reviewers,credential-management-reviewers,denschub,dimi,robwu
Depends on D173450

Differential Revision: https://phabricator.services.mozilla.com/D173451
2023-03-24 19:35:25 +00:00
Greg Stoll
1619302678 Bug 1818762 - update our implementation of IsValidImageSection r=yjuglaret
Differential Revision: https://phabricator.services.mozilla.com/D173328
2023-03-24 15:22:00 +00:00
ffxbld
69b2458079 No Bug, mozilla-central repo-update HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D173401
2023-03-23 12:31:50 +00:00
Joel Maher
b737a6612d Bug 1820900 - Run unittests on MSIX debug. r=bhearsum,ci-and-tooling,aryx
Differential Revision: https://phabricator.services.mozilla.com/D173080
2023-03-22 16:08:37 +00:00
Mike Hommey
9b67b694bf Bug 1822484 - Rename IsDevelopmentBuild. r=necko-reviewers,media-playback-reviewers,padenot,emilio
Differential Revision: https://phabricator.services.mozilla.com/D172748
2023-03-21 21:54:27 +00:00
Cristian Tuns
aa17c3a176 Backed out changeset d9e7b204d089 (bug 1820900) for causing bc failures in runtests.py CLOSED TREE 2023-03-21 16:25:12 -04:00
Joel Maher
c710ce2144 Bug 1820900 - Run unittests on MSIX debug. r=bhearsum,ci-and-tooling,aryx
Differential Revision: https://phabricator.services.mozilla.com/D173080
2023-03-21 13:54:26 +00:00
Kershaw Chang
5e58575e28 Bug 1809843 - Skip Failed tests, r=necko-reviewers,extension-reviewers,credential-management-reviewers,valentin,sgalich,robwu
Differential Revision: https://phabricator.services.mozilla.com/D171842
2023-03-21 09:09:58 +00:00
ffxbld
787579f0f2 No Bug, mozilla-central repo-update HPKP remote-settings tld-suffixes - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D172961
2023-03-20 12:38:17 +00:00
Dana Keeler
0d4ea7981e Bug 1819172 - cap max-age from HTTP Strict Transport Security headers at 100 years r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D172602
2023-03-16 20:01:54 +00:00
ffxbld
3e117e7b6a No Bug, mozilla-central repo-update HPKP remote-settings - r=release-managers,RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D172831
2023-03-16 19:28:45 +00:00
Chris Martin
9730f3f5d5 Bug 1822308 - Re-tighten GPU sandbox's filesystem access
Differential Revision: https://phabricator.services.mozilla.com/D172565
2023-03-15 13:32:42 +00:00
serge-sans-paille
860ac9660a Bug 1820573 - Make security/ buildable outside of a unified build environment r=andi,keeler
Differential Revision: https://phabricator.services.mozilla.com/D171732
2023-03-15 07:30:36 +00:00
Abhishek Tiwari
3a7bf0c2e8 Bug 1821620 - Convert toolkit/components/forgetaboutsite to ES modules r=Standard8
Differential Revision: https://phabricator.services.mozilla.com/D172230
2023-03-14 21:36:38 +00:00
Gabriele Svelto
a4b115ad0e Bug 1820768 - Add a test covering crash generation for sandbox violations; r=gerard-majax
Differential Revision: https://phabricator.services.mozilla.com/D171862
2023-03-14 11:46:11 +00:00
ffxbld
242b7f8acc No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,diannaS
Differential Revision: https://phabricator.services.mozilla.com/D172402
2023-03-13 12:03:34 +00:00
Marian-Vasile Laza
ee72efd1e9 Backed out 5 changesets (bug 1809843) for causing Cargo related build bustages. CLOSED TREE
Backed out changeset 5c494680f448 (bug 1809843)
Backed out changeset 02742b38edab (bug 1809843)
Backed out changeset 2b9b32ca8294 (bug 1809843)
Backed out changeset 56631cb02ae6 (bug 1809843)
Backed out changeset 37e35a60a71f (bug 1809843)
2023-03-13 13:53:26 +02:00
Arthur Carcano
ee3f98a749 Bug 1819569 - Remove nss/crmf cluster. r=bbeurdouche
Differential Revision: https://phabricator.services.mozilla.com/D171338
2023-03-13 11:26:16 +00:00
Kershaw Chang
a60df34ad0 Bug 1809843 - Skip Failed tests, r=necko-reviewers,extension-reviewers,credential-management-reviewers,valentin,sgalich,robwu
Differential Revision: https://phabricator.services.mozilla.com/D171842
2023-03-13 11:12:33 +00:00
Dana Keeler
edd47623df Bug 1815768 - enable automatically regenerating test PKCS12 files r=jschanck
This adds a rudimentary method of regenerating test PKCS12 files via `mach
generate-test-certs`. Due to the complicated nature of the format, this
implementation ultimately relies on OpenSSL to implement the encryption and
encoding. genpgocert.py already relies on OpenSSL, so this is not a new
requirement. Additionally, due to the limited number of test PKCS12 files in
the tree, the options for creating these files are not very sophisticated. In
the future, it may be beneficial to create more kinds of files with various
properties, but at the moment this suffices.

Differential Revision: https://phabricator.services.mozilla.com/D172192
2023-03-10 23:55:23 +00:00
Marian-Vasile Laza
1b5ca21a5c Backed out 2 changesets (bug 1819969, bug 1820768) for bc failures on browser_content_crashes.js. CLOSED TREE
Backed out changeset 78a80851c017 (bug 1820768)
Backed out changeset a6cfb7f7b3c9 (bug 1819969)
2023-03-10 21:46:55 +02:00
Emilio Cobos Álvarez
1750731987 Bug 1821636 - Move security/manager UI to modern flexbox too. r=Gijs
I missed this directory.

Differential Revision: https://phabricator.services.mozilla.com/D172232
2023-03-10 17:56:11 +00:00
Gabriele Svelto
6bd6805d37 Bug 1820768 - Add a test covering crash generation for sandbox violations; r=gerard-majax
Differential Revision: https://phabricator.services.mozilla.com/D171862
2023-03-10 16:57:54 +00:00
John Schanck
c738d5a247 Bug 1815435 - land NSS NSS_3_89_RTM UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D172164
2023-03-09 23:07:34 +00:00
Dennis Jackson
db12cb9fb5 Bug 1821359: Disable TLS Key Pinning for Twitter Domains. r=keeler.
This patch removes Twitter domains from the list of sites we statically pin in Firefox
and regenerates the associated headers. Note that the Twitter domains are still
imported from Chrome's list of pins, but now have the test flag set, making them inert.

Differential Revision: https://phabricator.services.mozilla.com/D172161
2023-03-09 22:05:17 +00:00
Dana Keeler
af6da8d15f Bug 1776046 - wait for the error page to load in browser_clientAuth_connection.js r=jschanck
Differential Revision: https://phabricator.services.mozilla.com/D172063
2023-03-09 16:35:04 +00:00
ffxbld
65c8e686ae No Bug, mozilla-central repo-update HSTS HPKP remote-settings tld-suffixes - r=release-managers,diannaS
Differential Revision: https://phabricator.services.mozilla.com/D172108
2023-03-09 12:57:42 +00:00
Emilio Cobos Álvarez
3689e9f2d7 Bug 1821037 - Add a min width for exception dialog as well. r=Gijs
Before bug 1817842 we got almost to the 40em on windows due to the
width declaration there. Make sure the window is more appropriately
sized there.

Differential Revision: https://phabricator.services.mozilla.com/D172052
2023-03-09 11:11:39 +00:00
John Schanck
c5fdd1cdff Bug 1794045 - remove redundant data from builtins module. r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D171798
2023-03-08 20:08:11 +00:00
Otto Länd
111231d6db Bug 1793969, 1793972: apply code formatting via Lando
# ignore-this-changeset
2023-03-08 16:37:49 +00:00
Bob Owen
c774907d2b Bug 1793972: Enable an LPAC on the windows MF Media Engine utility process controlled by a pref. r=handyman
Differential Revision: https://phabricator.services.mozilla.com/D169601
2023-03-08 16:04:46 +00:00
Bob Owen
0fc6af7591 Bug 1820535: Refactor CIG sandbox policy set up. r=handyman
This moves the configuration into a separate function to simplify the main
policy settings functions and ensure that mitigations and policy rules are set
in the correct order.

Differential Revision: https://phabricator.services.mozilla.com/D171759
2023-03-08 14:17:53 +00:00
John Schanck
4728b65771 Bug 1815435 - land NSS NSS_3_89_BETA4 UPGRADE_NSS_RELEASE, r=keeler
Differential Revision: https://phabricator.services.mozilla.com/D171916
2023-03-08 00:15:30 +00:00
Andrew Osmond
54093fb0ef Bug 1819410 - Ensure we shutdown the RemoteSandboxBrokerParent IPDL instance during launch failures. r=jld
If the process being launched by the sandbox broker crashes after we
setup the IPDL channel, but before we successfully complete the
initialization process, we don't explicitly teardown
RemoteSandboxBrokerParent. As such, when we destroy the owning objects,
it attempts to destroy RemoteSandboxBrokerParent while the protocol is
still open, triggering a release assert for destroying
PRemoteSandboxBrokerParent while the protocol/channel are still open.

This patch makes us explicitly teardown the channel if there is a launch
failure inside the sandbox broker.

Differential Revision: https://phabricator.services.mozilla.com/D171258
2023-03-07 16:25:18 +00:00
Iulian Moraru
f95f9a62f5 Backed out changeset b4d727abf8e6 (bug 1820535) for causing Gtest assertions and crashes. 2023-03-07 14:34:24 +02:00
Bob Owen
f5b2ded59f Bug 1820535: Refactor CIG sandbox policy set up. r=handyman
This moves the configuration into a separate function to simplify the main
policy settings functions and ensure that mitigations and policy rules are set
in the correct order.

Differential Revision: https://phabricator.services.mozilla.com/D171759
2023-03-07 10:09:06 +00:00
Cristian Tuns
260d13ed8e Backed out changeset 48c77e0f9262 (bug 1815435) for causing xpcshell failures in test_cert_overrides.js CLOSED TREE UPGRADE_NSS_RELEASE 2023-03-06 16:33:38 -05:00
John Schanck
7800d03501 Bug 1815435 - land NSS NSS_3_89_BETA3 UPGRADE_NSS_RELEASE, r=djackson
Differential Revision: https://phabricator.services.mozilla.com/D171757
2023-03-06 20:17:40 +00:00
ffxbld
2b3f9b4183 No Bug, mozilla-central repo-update HSTS HPKP remote-settings - r=release-managers,diannaS
Differential Revision: https://phabricator.services.mozilla.com/D171691
2023-03-06 13:30:50 +00:00