gecko-dev/mfbt
Alex Catarineu bc96439261 Bug 461204 - Improve the random number generator for the boundaries in multipart/form-data r=smaug
Using a weak RNG for the form boundary allows a website operator to perform several
attacks on users (as outlined in https://trac.torproject.org/projects/tor/ticket/22919)

These include:
 - Identifying Windows users based on the unseeded RNG
 - Identify the number of form submissions that have occurred cross-origin between same-origin submissions

Additionally, a predictable boundary makes it possible to forge a boundary in the middle
of a file upload.

Differential Revision: https://phabricator.services.mozilla.com/D56056

--HG--
extra : moz-landing-system : lando
2020-01-13 20:41:14 +00:00
..
double-conversion Bug 1587590 - Update double-conversion to upstream revision 4a51e73. r=jwalden 2019-10-11 02:46:45 +00:00
lz4 Bug 1587187 - Update xxHash to version 0.7.2. r=dthayer 2019-10-08 19:53:34 +00:00
tests Bug 1608064 - Replace Is{Rvalue,Lvalue,}Reference with <type_traits> equivalents. r=froydnj 2020-01-10 10:40:34 +00:00
Algorithm.h
Alignment.h
AllocPolicy.h
AlreadyAddRefed.h
Array.h Bug 1477756 - Initial out-of-process WebGL implementation. r=mccr8,handyman 2020-01-08 22:19:14 +00:00
ArrayUtils.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
Assertions.cpp
Assertions.h Bug 1570499 - Part 1: Replace MOZ_FALLTHROUGH macro with C++17's [[fallthrough]] attribute. r=froydnj 2019-12-20 07:16:43 +00:00
Atomics.h
Attributes.h Bug 1570499 - Part 3: Remove MOZ_FALLTHROUGH macro definition. r=froydnj 2019-12-20 07:03:27 +00:00
BinarySearch.h
BloomFilter.h
Buffer.h
BufferList.h
Casting.h
ChaosMode.cpp
ChaosMode.h
Char16.h Bug 1602452 - Make member functions of nsTStringRepr defined in header constexpr. r=froydnj 2019-12-10 08:40:48 +00:00
CheckedInt.h Bug 1607816 - Replace mozilla::{Max, Min}Value with std::numeric_limits. r=froydnj 2020-01-08 16:30:40 +00:00
Compiler.h Bug 1576056 - delete all the standard library-related checks in Compiler.h; r=dmajor 2019-08-27 22:42:17 +00:00
Compression.cpp Bug 1553759 - Remove unused LZ4::decompress method r=froydnj 2019-10-30 14:55:52 +00:00
Compression.h Bug 1553759 - Remove unused LZ4::decompress method r=froydnj 2019-10-30 14:55:52 +00:00
DbgMacro.h
DebugOnly.h
DefineEnum.h
DoublyLinkedList.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
EndianUtils.h Bug 1439659 - Fix inadvertent typo (that would have been immediately obvious as compile error in a big-endian build, because of this bug's change, happily). r=froydnj 2019-12-16 21:14:05 +00:00
EnumeratedArray.h
EnumeratedRange.h
EnumSet.h
EnumTypeTraits.h
fallible.h Bug 1562358 - Move fallible.h into MFBT. r=glandium 2019-07-10 01:51:15 +00:00
FastBernoulliTrial.h Bug 1577051 - Fix an implicit-conversion-changes-value warning with new-enough clang by explicitly converting. r=froydnj 2019-08-28 16:35:22 +00:00
FloatingPoint.cpp
FloatingPoint.h Bug 1560658: Add SameValueZero to mfbt/FloatingPoint.h r=jwalden 2019-06-28 23:57:13 +00:00
FStream.h
FunctionTypeTraits.h
GuardObjects.h
HashFunctions.cpp
HashFunctions.h Bug 1567944 - remove *DISABLE_INTEGRAL_CONSTANT_OVERFLOW_WARNING macros; r=dmajor 2019-07-23 08:02:48 +00:00
HashTable.h Backed out changeset 310c4bf09003 (bug 1604585) for build bustages on ReentrancyGuard.h 2019-12-17 20:58:26 +02:00
HelperMacros.h Bug 1547519 - Rename NS_STRINGIFY to MOZ_STRINGIFY, move to mfbt, and unify stragglers r=glandium 2019-09-04 02:40:32 +00:00
IntegerPrintfMacros.h
IntegerRange.h
IntegerTypeTraits.h Bug 1607816 - Replace mozilla::{Max, Min}Value with std::numeric_limits. r=froydnj 2020-01-08 16:30:40 +00:00
JSONWriter.cpp
JSONWriter.h
JsRust.h Bug 1490601 part 2 - Move C++ entry points to encoding_c_mem to mfbt/. r=jwalden 2019-09-18 08:26:34 +00:00
Latin1.h Bug 1578339 addendum - Avoid function calls in ASCIIness and Latin1ness checking and conversion between Latin1 and UTF-16 for short strings. r=jandem 2019-09-26 12:46:16 +00:00
Likely.h
LinkedList.h
LinuxSignal.h
MacroArgs.h
MacroForEach.h
MathAlgorithms.h Bug 1590907 - Remove obsolete macro MOZ_HAVE_BITSCAN64. r=froydnj 2019-11-12 21:59:25 +00:00
Maybe.h Bug 1572205 - Use a single-member union as the storage for Maybe r=jwalden 2020-01-07 23:50:31 +00:00
MaybeOneOf.h
MemoryChecking.h
MemoryReporting.h
Move.h
moz.build Bug 1587590 - Update double-conversion to upstream revision 4a51e73. r=jwalden 2019-10-11 02:46:45 +00:00
NonDereferenceable.h
NotNull.h
NullPtr.h
Opaque.h
OperatorNewExtensions.h
Pair.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
Path.h
PodOperations.h
Poison.cpp
Poison.h
RandomNum.cpp Bug 461204 - Improve the random number generator for the boundaries in multipart/form-data r=smaug 2020-01-13 20:41:14 +00:00
RandomNum.h Bug 461204 - Improve the random number generator for the boundaries in multipart/form-data r=smaug 2020-01-13 20:41:14 +00:00
Range.h
RangedArray.h
RangedPtr.h Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2020-01-09 21:50:11 +00:00
RecordReplay.cpp Bug 1606447 - Initial landing for cloud replay, r=jlast. 2020-01-03 20:43:08 +00:00
RecordReplay.h Bug 1606447 - Initial landing for cloud replay, r=jlast. 2020-01-03 20:43:08 +00:00
ReentrancyGuard.h
RefCounted.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
RefCountType.h
RefPtr.h Bug 1600096 - Disable RefPtr conversion constructors when underlying pointer types are not convertible. r=froydnj 2019-12-11 10:11:45 +00:00
Result.h Bug 1585585 - Add {MOZ_LIKELY,MOZ_UNLIKELY} to Result::{isOk,isErr} consumers. r=jwalden 2019-10-10 23:46:42 +00:00
ResultExtensions.h
ReverseIterator.h
RollingMean.h
Saturate.h
Scoped.h
ScopeExit.h Bug 1581511 - fix move constructor of ScopeExit; r=froydnj 2019-09-17 13:45:28 +00:00
SegmentedVector.h
SHA1.cpp
SHA1.h
SharedLibrary.h
SmallPointerArray.h Bug 1562789 - SmallPointerArray should support moves, and have an IsEmpty() helper. r=froydnj 2019-07-02 18:50:04 +00:00
Span.h Bug 1607816 - Replace mozilla::{Max, Min}Value with std::numeric_limits. r=froydnj 2020-01-08 16:30:40 +00:00
SplayTree.h
Sprintf.h
SPSCQueue.h
StaticAnalysisFunctions.h
STYLE Bug 1550108 - Pull in secondary lz4 libraries r=glandium 2019-10-04 20:44:08 +00:00
TaggedAnonymousMemory.cpp
TaggedAnonymousMemory.h
TemplateLib.h
TextUtils.h Bug 1578339 addendum - Avoid function calls in ASCIIness and Latin1ness checking and conversion between Latin1 and UTF-16 for short strings. r=jandem 2019-09-26 12:46:16 +00:00
ThreadLocal.h
ThreadSafeWeakPtr.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
ToString.h
Tuple.h
TypedEnumBits.h
Types.h Bug 1519636 - Reformat recent changes to the Google coding style r=Ehsan 2019-10-21 14:13:44 +00:00
TypeTraits.h Bug 1608064 - Replace Is{Rvalue,Lvalue,}Reference with <type_traits> equivalents. r=froydnj 2020-01-10 10:40:34 +00:00
UniquePtr.h Bug 1608064 - Replace Is{Rvalue,Lvalue,}Reference with <type_traits> equivalents. r=froydnj 2020-01-10 10:40:34 +00:00
UniquePtrExtensions.cpp Bug 1534780 - Move ipc::FileDescriptor's UniquePtr instance into MFBT as UniqueFileHandle. r=froydnj 2019-06-28 19:46:58 +00:00
UniquePtrExtensions.h Bug 1534780 - Move ipc::FileDescriptor's UniquePtr instance into MFBT as UniqueFileHandle. r=froydnj 2019-06-28 19:46:58 +00:00
Unused.cpp
Unused.h
Utf8.cpp Bug 1490601 part 2 - Move C++ entry points to encoding_c_mem to mfbt/. r=jwalden 2019-09-18 08:26:34 +00:00
Utf8.h Bug 1607816 - Replace mozilla::{Max, Min}Value with std::numeric_limits. r=froydnj 2020-01-08 16:30:40 +00:00
Variant.h Bug 1584256 - Add IPDLParamTraits for Variant. r=nika,jwalden 2019-10-08 16:03:11 +00:00
Vector.h Bug 1588551 - Fix Vector::erase documentation comment r=jwalden 2019-10-15 17:38:13 +00:00
WeakPtr.h Bug 1607595 - Remove uses of mozilla::IsBaseOf. r=froydnj 2020-01-08 14:52:10 +00:00
WindowsVersion.h
WrappingOperations.h Bug 1567944 - remove *DISABLE_INTEGRAL_CONSTANT_OVERFLOW_WARNING macros; r=dmajor 2019-07-23 08:02:48 +00:00
XorShift128PlusRNG.h