Read-only Git mirror of the Mercurial gecko repositories at https://hg.mozilla.org. How to contribute: https://firefox-source-docs.mozilla.org/contributing/contribution_quickref.html
Go to file
June Wilde 3dba77a779 Bug 1468556 - Protect against overlapping files in libmar; r=mhowell
Disallows files from referencing the same bytes in the content blocks of a MAR
file by storing a list of structs containing a file's byte offsets and lengths.
A list was chosen since the cap of 256 files wouldn't produce considerable
overhead when extracting/reading/searching/etc through the archive.

Removing the ability for a MAR file to reference the same content block
repeatedly seems like a better solution than what was suggested in the BLRG
report. (limiting the number of files or checking for overly large
decompressed files)

Allows us to prohibit this type of file bomb while only losing an attribute
of the MAR file format that wasn't being leveraged. The fix is applied in
mar_enum_items and mar_find_item so that the manifest the updater uses is
equally safeguarded as the mar host tool.

Differential Revision: https://phabricator.services.mozilla.com/D11706

--HG--
extra : moz-landing-system : lando
2018-11-26 17:25:24 +00:00
.cargo Bug 1504507 - Update serde branch for changes in WR PR #3264. r=kats 2018-11-05 13:14:07 +00:00
.vscode Bug 1493017 - Tweak vscode tasks.json problemMatcher regexes to handle clang/Windows output - r=jya 2018-09-21 10:00:59 +00:00
accessible Bug 1508472 - Part 1: First batch of comment fix-ups in preparation for the tree reformat r=sylvestre 2018-11-27 10:08:58 +00:00
browser Bug 1509906 - use the window's initial url to determine what remoteType the initial browser should have, r=dao,mconley 2018-11-27 15:56:26 +00:00
build Bug 1508419 - Gracefully fail if nasm doesn't print version. r=firefox-build-system-reviewers,mshal 2018-11-26 16:13:48 +00:00
caps Bug 1497940 - Part IV, Move pluginProblem resources from chrome://mozapps to chrome://global r=mossop 2018-11-22 05:49:22 +00:00
chrome Bug 1356412: Part 2 - Remove script loader path mangling from DOM code. r=bz 2018-11-02 16:15:26 -07:00
config Bug 1493400 - Create build files for dav1d. r=firefox-build-system-reviewers,chmanchester 2018-11-24 01:53:31 +00:00
db Bug 1495238 - Upgrade to SQLite 3.25.3. r=mak 2018-11-06 16:59:19 +00:00
devtools Bug 1509908 - Enabling the flexbox tools on all channels; r=gl 2018-11-26 17:17:13 +00:00
docshell Bug 1509555 - Part 4: Remove nsIWebProgressListener::STATE_BLOCKED_SLOW_TRACKING_CONTENT r=baku 2018-11-27 08:56:39 +00:00
dom Backed out changeset 11d6688b953f (bug 1508472) for build bustages on a CLOSED TREE 2018-11-27 18:28:30 +02:00
editor Backed out changeset 11d6688b953f (bug 1508472) for build bustages on a CLOSED TREE 2018-11-27 18:28:30 +02:00
embedding Backed out 6 changesets (bug 1502457) for causing Mn mozprocess automation failures in '/Users/cltbld/tasks/task_1542517470/build/venv/bin/python 2018-11-18 10:24:11 +02:00
extensions Backed out changeset 11d6688b953f (bug 1508472) for build bustages on a CLOSED TREE 2018-11-27 18:28:30 +02:00
gfx Backed out changeset 11d6688b953f (bug 1508472) for build bustages on a CLOSED TREE 2018-11-27 18:28:30 +02:00
gradle/wrapper Bug 1509572 - Part 1: Bump Gradle wrapper to 4.10.2; decouple script from Gradle version. r=snorp 2018-11-26 21:42:27 +00:00
hal Bug 1509450 - Remove unnecessary inclusions of ContentParent.h and ContentChild.h r=froydnj 2018-11-26 14:49:44 +00:00
image Bug 1508099 Part 2 - Record refcount changes for image decoders and decoding tasks, r=tnikkel. 2018-11-17 12:55:12 -10:00
intl Merge inbound to mozilla-central. a=merge 2018-11-26 18:17:37 +02:00
ipc Bug 1509555 - Part 3: Remove reporting of tracker statistics to docshell which was added for fastblock r=valentin,baku 2018-11-27 08:55:36 +00:00
js Bug 1510018: Initial SMDOC comment for callVM / VMFunctions r=nbp DONTBUILD 2018-11-27 16:26:36 +00:00
layout Bug 1509958, bug 1508734 - Give up on an assert that doesn't hold because of bug 1510208. r=smaug 2018-11-27 13:12:44 +00:00
media Bug 1507216: Make sure AudioConduit doesn't re-create the recv stream without de-registering the old one. r=dminor 2018-11-26 19:56:25 +00:00
memory Bug 1499907 - Add a jsonEscape argument to fixSymbols. r=erahm 2018-11-21 10:28:00 +11:00
mfbt Bug 1509927 - use a little more KnownNotNull placement new in MFBT; r=njn 2018-11-26 18:51:35 -05:00
mobile Bug 1509450 - Remove unnecessary inclusions of ContentParent.h and ContentChild.h r=froydnj 2018-11-26 14:49:44 +00:00
modules Bug 1468556 - Protect against overlapping files in libmar; r=mhowell 2018-11-26 17:25:24 +00:00
mozglue Bug 1486524 - Don't use XZ compression for libs on Android r=glandium,nalexander 2018-11-23 20:31:57 +00:00
netwerk Bug 1509555 - Part 4: Remove nsIWebProgressListener::STATE_BLOCKED_SLOW_TRACKING_CONTENT r=baku 2018-11-27 08:56:39 +00:00
nsprpub Bug 1477680, NSPR 4.20 RTM, no code change, only version number, r=me 2018-08-28 16:21:01 +02:00
other-licenses Bug 1468544 - Replace mar_hash_name with CityHash algorithm. r=rstrong 2018-11-06 13:34:21 -05:00
parser Bug 1503019 - Part II, Remove dom.webcomponents.customelements.enabled pref r=smaug 2018-11-15 06:52:01 +00:00
python Bug 1509387 - When setting up ESLint, call npm via node so that node doesn't need to be in the path. r=ahal 2018-11-27 14:46:53 +00:00
security Bug 1509555 - Part 4: Remove nsIWebProgressListener::STATE_BLOCKED_SLOW_TRACKING_CONTENT r=baku 2018-11-27 08:56:39 +00:00
services Bug 1469564 - Split RemoteSettings client into dedicated module r=glasserc 2018-11-27 10:34:16 +00:00
servo Backed out 2 changesets (bug 1504065) for failing Win reftest at child-in-animating-element-display-none.html on a CLOSED TREE 2018-11-27 15:33:29 +02:00
startupcache Bug 1503207 - Remove nsWeakPtr.h and cleanup all files including weak reference-related headers r=froydnj 2018-10-31 20:39:03 +00:00
storage Bug 1507540 part 6. Make nsIVariant's "type" a notxpcom attribute. r=froydnj 2018-11-19 20:20:05 -05:00
taskcluster Backed out changeset 0a594d7bf930 (bug 1509973) for failing reftests on a CLOSED TREE 2018-11-27 15:40:45 +02:00
testing Bug 1499003 - Skip some especially flaky fennec wpt tests r=jgraham 2018-11-27 13:46:54 +00:00
third_party Bug 1493400 - Update dav1d from upstream to d27598e. r=TD-Linux 2018-11-27 14:04:37 +00:00
toolkit Bug 1509555 - Part 5: Remove fastblock from tests r=baku 2018-11-27 08:57:53 +00:00
tools Bug 1509387 - When setting up ESLint, call npm via node so that node doesn't need to be in the path. r=ahal 2018-11-27 14:46:53 +00:00
uriloader Bug 1509555 - Part 4: Remove nsIWebProgressListener::STATE_BLOCKED_SLOW_TRACKING_CONTENT r=baku 2018-11-27 08:56:39 +00:00
view Bug 1504521 - rename in-tree mentions of bugzilla metadata for product and component "Core :: Layout: Web Painting" to "Core :: Web Painting" r=kats 2018-11-04 12:57:04 +00:00
widget Bug 1509450 - Remove unnecessary inclusions of ContentParent.h and ContentChild.h r=froydnj 2018-11-26 14:49:44 +00:00
xpcom Bug 1460674 - part 3 - make PLDHashTable iteration faster; r=njn 2018-11-26 16:24:50 -05:00
xpfe/appshell Bug 1502330 - Create BrowsingContext with passed opener. r=qdot 2018-11-27 09:59:44 +00:00
.arcconfig
.clang-format Bug 1508255 - Merge js/src/.clang-format into top-level r=sylvestre 2018-11-20 12:42:30 +00:00
.clang-format-ignore Bug 1510128 - Exclude irregexp from reformatting r=Ehsan 2018-11-27 15:18:14 +00:00
.cron.yml Bug 1503547 - Move searchfox indexing jobs a half hour earlier to match nightly build times. r=mccr8 2018-11-01 15:37:07 +00:00
.eslintignore Bug 1507524 - Update miscellaneous things with the new WR location. r=jrmuizel 2018-11-22 21:47:50 +00:00
.eslintrc.js Bug 1486741 - Enable ESLint rule comma-dangle for all of mozilla-central (setup ESLint). r=mossop 2018-10-19 08:46:31 +00:00
.flake8 Bug 1508889 - Remove ipc/chromium from the lists of third-party code. r=Ehsan 2018-11-21 03:11:37 +00:00
.gdbinit Bug 1486903 - Add "ftl" command to dump frame subtree to .gdbinit. r=Ehsan 2018-08-28 20:20:21 +00:00
.gdbinit_python
.git-blame-ignore-revs Bug 1509369 - Add .git-blame-ignore-revs file. r=Ehsan 2018-11-22 20:39:20 +00:00
.gitignore Bug 1503447 - Remove Nothing() semantic from ASR overrides r=kats 2018-11-14 14:15:16 +00:00
.hgignore Bug 1479503: Check infer in ./mach static-analysis autotest. r=nalexander 2018-10-24 21:54:34 +00:00
.hgtags No bug - Tagging mozilla-central c44fbdd5173548c9035256dda8fd3512f67118a8 with FIREFOX_NIGHTLY_64_END a=release DONTBUILD CLOSED TREE 2018-10-22 08:48:42 -07:00
.lldbinit
.mailmap
.taskcluster.yml Bug 1509997 - set priorities cron > action > decision r=tomprince 2018-11-26 22:13:41 +00:00
.trackerignore Bug 1486468 - Add .trackerignore file to avoid GNOME Tracker indexing mozilla-central files. r=ahal 2018-08-27 16:45:03 +02:00
.yamllint
.ycm_extra_conf.py
aclocal.m4
AUTHORS Bug 1481409 - Use HTTPS protocol for Mozilla's Credits link in AUTHORS file r=mossop 2018-08-13 16:39:30 +00:00
build.gradle Bug 1458668 - Enforce changelog for GeckoView; r=snorp 2018-11-26 16:27:06 +00:00
Cargo.lock Bug 1507726 - Update encoding_rs to 0.8.12. r=m_kato 2018-11-22 01:41:51 +00:00
Cargo.toml Bug 1507524 - Move webrender to gfx/wr. r=jrmuizel 2018-11-22 21:47:48 +00:00
client.mk Bug 1498031 - Merge code paths for running configure between Tup and Make based backends. r=firefox-build-system-reviewers,mshal 2018-10-16 22:21:36 +00:00
client.py
CLOBBER Bug 1499026 - Part 3: Updating ICU requires a clobber. r=clobber 2018-11-01 06:32:49 -07:00
configure.in
configure.py
GNUmakefile
gradle.properties
gradlew
LEGAL
LICENSE
mach
Makefile.in Bug 1498031 - Merge code paths for running configure between Tup and Make based backends. r=firefox-build-system-reviewers,mshal 2018-10-16 22:21:36 +00:00
moz.build Bug 1508248 - Update in-tree bugzilla metadata to use 'Firefox Build System :: Mach Core' for mach files r=froydnj 2018-11-19 13:35:14 +00:00
moz.configure Backed out 6 changesets (bug 1502457) for causing Mn mozprocess automation failures in '/Users/cltbld/tasks/task_1542517470/build/venv/bin/python 2018-11-18 10:24:11 +02:00
mozilla-config.h.in Bug 1504022 - Map GetExceptionCode to a nop to avoid an error r=bobowen 2018-11-02 13:28:01 -05:00
old-configure.in Merge mozilla-central to autoland a=merge on a CLOSED TREE 2018-11-27 01:03:16 +02:00
package-lock.json Bug 1495397 - Update mozilla-central's package.json for being more generic, and move existing ESLint modules to dev dependencies. r=firefox-build-system-reviewers,nalexander 2018-10-01 17:28:45 +00:00
package.json Bug 1495397 - Update mozilla-central's package.json for being more generic, and move existing ESLint modules to dev dependencies. r=firefox-build-system-reviewers,nalexander 2018-10-01 17:28:45 +00:00
README.txt Bug 1480997 - Remove "Mozilla FTP server" link in README.txt r=mossop 2018-10-23 10:06:29 +00:00
settings.gradle
test.mozbuild

An explanation of the Mozilla Source Code Directory Structure and links to
project pages with documentation can be found at:

    https://developer.mozilla.org/en/Mozilla_Source_Code_Directory_Structure

For information on how to build Mozilla from the source code, see:

    https://developer.mozilla.org/en/docs/Build_Documentation

To have your bug fix / feature added to Mozilla, you should create a patch and
submit it to Bugzilla (https://bugzilla.mozilla.org). Instructions are at:

    https://developer.mozilla.org/en/docs/Creating_a_patch
    https://developer.mozilla.org/en/docs/Getting_your_patch_in_the_tree

If you have a question about developing Mozilla, and can't find the solution
on https://developer.mozilla.org, you can try asking your question in a
mozilla.* Usenet group, or on IRC at irc.mozilla.org. [The Mozilla news groups
are accessible on Google Groups, or news.mozilla.org with a NNTP reader.]

Nightly development builds can be downloaded from:

    https://archive.mozilla.org/pub/firefox/nightly/latest-mozilla-central/
            - or -
    https://www.mozilla.org/firefox/channel/desktop/#nightly

Keep in mind that nightly builds, which are used by Mozilla developers for
testing, may be buggy.