gecko-dev/security
Dana Keeler fae63f9b28 Bug 1487228 - (2/2) avoid holding CERTCertList instances long-term in nsNSSCertList r=jcj
Each instance of CERTCertList creates a PLArena with a chunk size of 2048 bytes,
but only needs space for 3 pointers per certificate in the list. The majority of
the time Gecko uses CERTCertList, we'll store ~3 certificates (although in some
cases we do store a few hundred, such as in tests or the certificate manager).
This is fairly inefficient. This patch starts the process of avoiding using
CERTCertList in Gecko by converting nsNSSCertList (i.e. nsIX509CertList) (as
well as nsNSSCertListEnumerator) to use a more efficient data structure to hold
references to certificates long-term. Future follow-up patches could (and
should) update certificate verification APIs in PSM to avoid CERTCertList as
well.

Depends on D5096

Differential Revision: https://phabricator.services.mozilla.com/D5097

--HG--
extra : moz-landing-system : lando
2018-09-12 18:14:03 +00:00
..
apps Bug 1464869 - Run autopep8 on security/ r=fkiefer 2018-05-26 06:47:27 -07:00
certverifier Bug 1399877 - globally define MOZ_DLL_PREFIX/MOZ_DLL_SUFFIX; r=gps 2018-09-11 13:31:20 -04:00
manager Bug 1487228 - (2/2) avoid holding CERTCertList instances long-term in nsNSSCertList r=jcj 2018-09-12 18:14:03 +00:00
nss Bug 1488622 - land NSS 8f6014565b91 UPGRADE_NSS_RELEASE, r=me 2018-09-06 10:42:40 -07:00
pkix Backed out changeset 5950c9d63c3b (bug 1090497) for build bustages on several files. CLOSED TREE 2018-08-02 19:59:53 +03:00
sandbox Bug 1457092 - Implement sandboxing on OpenBSD. r=gcp, r=jld 2018-08-23 07:35:00 -04:00
.eslintrc.js Bug 1487246: Enable the eslint no-sequences rule. r=Standard8 2018-08-29 16:15:33 -07:00
generate_certdata.py Bug 1464869 - Run autopep8 on security/ r=fkiefer 2018-05-26 06:47:27 -07:00
generate_mapfile.py
moz.build Bug 1341222 - Fix building in-tree NSS against system NSPR. r=froydnj 2018-08-21 07:25:11 +09:00
nss.symbols Backed out 6 changesets (bug 1421501) for bustages on security/nss/lib/freebl/mpi/mp_comba.c on a CLOSED TREE 2018-08-23 17:13:42 +03:00