forked from pool/MozillaFirefox
Accepting request 839098 from mozilla:Factory
- Mozilla Firefox 81.0.1 * https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/ - remove obsolete python2 build requires - Increase disk requirements in _constraints to match current needs - Mozilla Firefox 81.0 * https://www.mozilla.org/en-US/firefox/81.0/releasenotes MFSA 2020-42 (bsc#1176756) * CVE-2020-15675 (bmo#1654211) Use-After-Free in WebGL * CVE-2020-15677 (bmo#1641487) Download origin spoofing via redirect * CVE-2020-15676 (bmo#1646140) XSS when pasting attacker-controlled data into a contenteditable element * CVE-2020-15678 (bmo#1660211) When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after- free scenario * CVE-2020-15673 (bmo#1648493, bmo#1660800) Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3 * CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293) Memory safety bugs fixed in Firefox 81 - requires NSPR 4.28 NSS 3.56 - removed obsolete patches * mozilla-system-nspr.patch * mozilla-bmo1661715.patch OBS-URL: https://build.opensuse.org/request/show/839098 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/MozillaFirefox?expand=0&rev=319
This commit is contained in:
Dominique Leuenberger
Git OBS Bridge
commit
be7789360b
@ -1,3 +1,81 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Oct 1 20:00:27 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
|
||||
- Mozilla Firefox 81.0.1
|
||||
* https://www.mozilla.org/en-US/firefox/81.0.1/releasenotes/
|
||||
- remove obsolete python2 build requires
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 30 18:49:10 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
||||
|
||||
- Increase disk requirements in _constraints to match current needs
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Sep 18 06:22:40 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
|
||||
- Mozilla Firefox 81.0
|
||||
* https://www.mozilla.org/en-US/firefox/81.0/releasenotes
|
||||
MFSA 2020-42 (bsc#1176756)
|
||||
* CVE-2020-15675 (bmo#1654211)
|
||||
Use-After-Free in WebGL
|
||||
* CVE-2020-15677 (bmo#1641487)
|
||||
Download origin spoofing via redirect
|
||||
* CVE-2020-15676 (bmo#1646140)
|
||||
XSS when pasting attacker-controlled data into a
|
||||
contenteditable element
|
||||
* CVE-2020-15678 (bmo#1660211)
|
||||
When recursing through layers while scrolling, an iterator
|
||||
may have become invalid, resulting in a potential use-after-
|
||||
free scenario
|
||||
* CVE-2020-15673 (bmo#1648493, bmo#1660800)
|
||||
Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3
|
||||
* CVE-2020-15674 (bmo#1656063, bmo#1656064, bmo#1656067, bmo#1660293)
|
||||
Memory safety bugs fixed in Firefox 81
|
||||
- requires
|
||||
NSPR 4.28
|
||||
NSS 3.56
|
||||
- removed obsolete patches
|
||||
* mozilla-system-nspr.patch
|
||||
* mozilla-bmo1661715.patch
|
||||
* mozilla-silence-no-return-type.patch
|
||||
- skip post-build-checks for 15.0 and 15.1
|
||||
- add revert-795c8762b16b.patch to fix LTO builds with gcc
|
||||
(related to bmo#1644409)
|
||||
- require python3-curses as workaround to fix i586 build
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Sep 17 11:45:31 UTC 2020 - Guillaume GARDET <guillaume.gardet@opensuse.org>
|
||||
|
||||
- Use %limit_build macro again for aarch64 and armv7, instead of
|
||||
the new memoryperjob _constraints to use more workers
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Sep 5 17:43:26 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
|
||||
- add mozilla-bmo1661715.patch to fix Flash plugin
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 2 17:11:19 UTC 2020 - Manfred Hollstein <manfred.h@gmx.net>
|
||||
|
||||
- Mozilla Firefox 80.0.1: Bug fixes:
|
||||
* Fixed a performance regression when encountering new intermediate
|
||||
CA certificates (bmo#1661543)
|
||||
* Fixed crashes possibly related to GPU resets (bmo#1627616)
|
||||
* Fixed rendering on some sites using WebGL (bmo#1659225)
|
||||
* Fixed the zoom-in keyboard shortcut on Japanese language builds
|
||||
(bmo#1661895)
|
||||
* Fixed download issues related to extensions and cookies
|
||||
(bmo#1655190)
|
||||
- added mozilla-silence-no-return-type.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Aug 25 19:30:15 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
|
||||
- more whitelisting (/dev/random) for sandbox in relation to FIPS
|
||||
(bsc#1174284)
|
||||
- improve langpack builds to use dedicated objdirs and make it
|
||||
parallel again
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 22 06:52:01 UTC 2020 - Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
|
||||
|
||||
@ -17,6 +17,10 @@
|
||||
#
|
||||
|
||||
|
||||
%if 0%{?suse_version} < 1550 && 0%{?sle_version} <= 150100
|
||||
#!BuildIgnore: post-build-checks
|
||||
%endif
|
||||
|
||||
# changed with every update
|
||||
# orig_version vs. mainver: To have beta-builds
|
||||
# FF70beta3 would be released as FF69.99
|
||||
@ -25,9 +29,9 @@
|
||||
# orig_suffix b3
|
||||
# major 69
|
||||
# mainver %major.99
|
||||
%define major 80
|
||||
%define mainver %major.0
|
||||
%define orig_version 80.0
|
||||
%define major 81
|
||||
%define mainver %major.0.1
|
||||
%define orig_version 81.0.1
|
||||
%define orig_suffix %{nil}
|
||||
%define update_channel release
|
||||
%define branding 1
|
||||
@ -82,6 +86,7 @@ BuildRequires: autoconf213
|
||||
BuildRequires: dbus-1-glib-devel
|
||||
BuildRequires: dejavu-fonts
|
||||
BuildRequires: fdupes
|
||||
BuildRequires: memory-constraints
|
||||
%if 0%{?suse_version} <= 1320
|
||||
BuildRequires: gcc9-c++
|
||||
%else
|
||||
@ -95,17 +100,17 @@ BuildRequires: libidl-devel
|
||||
BuildRequires: libiw-devel
|
||||
BuildRequires: libproxy-devel
|
||||
BuildRequires: makeinfo
|
||||
BuildRequires: mozilla-nspr-devel >= 4.27
|
||||
BuildRequires: mozilla-nss-devel >= 3.55
|
||||
BuildRequires: mozilla-nspr-devel >= 4.28
|
||||
BuildRequires: mozilla-nss-devel >= 3.56
|
||||
BuildRequires: nasm >= 2.14
|
||||
BuildRequires: nodejs10 >= 10.21.0
|
||||
BuildRequires: python-devel
|
||||
%if 0%{?sle_version} >= 120000 && 0%{?sle_version} < 150000
|
||||
BuildRequires: python-libxml2
|
||||
BuildRequires: python36
|
||||
%else
|
||||
BuildRequires: python2-xml
|
||||
BuildRequires: python3 >= 3.5
|
||||
BuildRequires: python3-curses
|
||||
BuildRequires: python3-devel
|
||||
%endif
|
||||
BuildRequires: rust >= 1.43
|
||||
BuildRequires: rust-cbindgen >= 0.14.3
|
||||
@ -208,11 +213,11 @@ Patch25: mozilla-bmo998749.patch
|
||||
Patch26: mozilla-bmo1626236.patch
|
||||
Patch27: mozilla-s390x-skia-gradient.patch
|
||||
Patch28: mozilla-libavcodec58_91.patch
|
||||
Patch29: mozilla-system-nspr.patch
|
||||
Patch29: revert-795c8762b16b.patch
|
||||
# Firefox/browser
|
||||
Patch101: firefox-kde.patch
|
||||
Patch102: firefox-branded-icons.patch
|
||||
%endif # only_print_mozconfig
|
||||
%endif
|
||||
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
||||
Requires(post): coreutils shared-mime-info desktop-file-utils
|
||||
Requires(postun): shared-mime-info desktop-file-utils
|
||||
@ -351,11 +356,11 @@ cd $RPM_BUILD_DIR/%{srcname}-%{orig_version}
|
||||
%patch26 -p1
|
||||
%patch27 -p1
|
||||
%patch28 -p1
|
||||
%patch29 -p1
|
||||
%patch29 -p1 -R
|
||||
# Firefox
|
||||
%patch101 -p1
|
||||
%patch102 -p1
|
||||
%endif # only_print_mozconfig
|
||||
%endif
|
||||
|
||||
%build
|
||||
%if !%{with only_print_mozconfig}
|
||||
@ -378,9 +383,9 @@ if test "$kdehelperversion" != %{kde_helper_version}; then
|
||||
echo fix kde helper version in the .spec file
|
||||
exit 1
|
||||
fi
|
||||
%endif # only_print_mozconfig
|
||||
|
||||
source %{SOURCE4}
|
||||
%endif
|
||||
|
||||
export CARGO_HOME=${RPM_BUILD_DIR}/%{srcname}-%{orig_version}/.cargo
|
||||
export MOZ_SOURCE_CHANGESET=$RELEASE_TAG
|
||||
@ -391,6 +396,7 @@ export MOZ_BUILD_DATE=$RELEASE_TIMESTAMP
|
||||
export MOZILLA_OFFICIAL=1
|
||||
export BUILD_OFFICIAL=1
|
||||
export MOZ_TELEMETRY_REPORTING=1
|
||||
export MACH_USE_SYSTEM_PYTHON=1
|
||||
%if 0%{?suse_version} <= 1320
|
||||
export CC=gcc-9
|
||||
%else
|
||||
@ -431,6 +437,9 @@ echo "export MOZ_TELEMETRY_REPORTING=1"
|
||||
echo ""
|
||||
cat << EOF
|
||||
%else
|
||||
%ifarch aarch64 %arm
|
||||
%limit_build -m 2000
|
||||
%endif
|
||||
cat << EOF > $MOZCONFIG
|
||||
%endif
|
||||
mk_add_options MOZILLA_OFFICIAL=1
|
||||
@ -475,6 +484,7 @@ ac_add_options --disable-debug
|
||||
#ac_add_options --enable-chrome-format=jar
|
||||
ac_add_options --enable-update-channel=%{update_channel}
|
||||
ac_add_options --with-mozilla-api-keyfile=%{SOURCE18}
|
||||
# Google-service currently not available for free anymore
|
||||
#ac_add_options --with-google-location-service-api-keyfile=%{SOURCE19}
|
||||
ac_add_options --with-google-safebrowsing-api-keyfile=%{SOURCE19}
|
||||
ac_add_options --with-unsigned-addon-scopes=app
|
||||
@ -528,22 +538,36 @@ xvfb-run --server-args="-screen 0 1920x1080x24" \
|
||||
|
||||
# build additional locales
|
||||
%if %localize
|
||||
# The file obj/browser/locales/bookmarks.html will be overwritten by each langpack-build with the current translation
|
||||
# Thus we save here the original, to restore it afterwards, so that the default installation will not have zh-TW
|
||||
# bookmarks
|
||||
# See also https://bugzilla.opensuse.org/show_bug.cgi?id=1167976
|
||||
cp ../obj/browser/locales/bookmarks.html ../obj/browser/locales/bookmarks.html_ORIG
|
||||
|
||||
mkdir -p %{buildroot}%{progdir}/browser/extensions
|
||||
truncate -s 0 %{_tmppath}/translations.{common,other}
|
||||
# Adding "-P 0" would give us parallel builds of langpacks. Unfortunately, mach currently doesn't support
|
||||
# building them in parallel. If we do, we get race-conditions and have mixed languages in the langpacks.
|
||||
# See https://bugzilla.suse.com/show_bug.cgi?id=1173986
|
||||
# langpack-build can not be done in parallel easily (see https://bugzilla.mozilla.org/show_bug.cgi?id=1660943)
|
||||
# Therefore, we have to have a separate obj-dir for each language
|
||||
# We do this, by creating a mozconfig-template with the necessary switches
|
||||
# and a placeholder obj-dir, which gets copied and modified for each language
|
||||
|
||||
# Create mozconfig-template for langbuild
|
||||
cat << EOF > ${MOZCONFIG}_LANG
|
||||
mk_add_options MOZILLA_OFFICIAL=1
|
||||
mk_add_options BUILD_OFFICIAL=1
|
||||
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/../obj_LANG
|
||||
. \$topsrcdir/browser/config/mozconfig
|
||||
ac_add_options --prefix=%{_prefix}
|
||||
ac_add_options --with-l10n-base=$RPM_BUILD_DIR/l10n
|
||||
ac_add_options --disable-updater
|
||||
%if %branding
|
||||
ac_add_options --enable-official-branding
|
||||
%endif
|
||||
EOF
|
||||
|
||||
sed -r '/^(ja-JP-mac|ga-IE|en-US|)$/d;s/ .*$//' $RPM_BUILD_DIR/%{srcname}-%{orig_version}/browser/locales/shipped-locales \
|
||||
| xargs -n 1 -I {} /bin/sh -c '
|
||||
| xargs -n 1 %{?jobs:-P %jobs} -I {} /bin/sh -c '
|
||||
locale=$1
|
||||
./mach build langpack-$locale
|
||||
cp -L ../obj/dist/linux-*/xpi/firefox-%{orig_version}.$locale.langpack.xpi \
|
||||
cp ${MOZCONFIG}_LANG ${MOZCONFIG}_$locale
|
||||
sed -i "s|obj_LANG|obj_$locale|" ${MOZCONFIG}_$locale
|
||||
export MOZCONFIG=${MOZCONFIG}_$locale
|
||||
# nsinstall is needed for langpack-build. It is already built by `./mach build`, but building it again is very fast
|
||||
./mach build config/nsinstall langpack-$locale
|
||||
cp -L ../obj_$locale/dist/linux-*/xpi/firefox-%{orig_version}.$locale.langpack.xpi \
|
||||
%{buildroot}%{progdir}/browser/extensions/langpack-$locale@firefox.mozilla.org.xpi
|
||||
# remove prefs, profile defaults, and hyphenation from langpack
|
||||
#rm -rf %{buildroot}%{progdir}/browser/extensions/langpack-$locale@firefox.mozilla.org/defaults
|
||||
@ -557,13 +581,10 @@ sed -r '/^(ja-JP-mac|ga-IE|en-US|)$/d;s/ .*$//' $RPM_BUILD_DIR/%{srcname}-%{orig
|
||||
echo %{progdir}/browser/extensions/langpack-$locale@firefox.mozilla.org.xpi \
|
||||
>> %{_tmppath}/translations.$_l10ntarget
|
||||
' -- {}
|
||||
|
||||
# Restoring the original bookmarksfile
|
||||
cp ../obj/browser/locales/bookmarks.html_ORIG ../obj/browser/locales/bookmarks.html
|
||||
%endif
|
||||
|
||||
ccache -s
|
||||
%endif # only_print_mozconfig
|
||||
%endif
|
||||
|
||||
%install
|
||||
cd $RPM_BUILD_DIR/obj
|
||||
@ -773,12 +794,12 @@ exit 0
|
||||
%files translations-common -f %{_tmppath}/translations.common
|
||||
%defattr(-,root,root)
|
||||
%dir %{progdir}
|
||||
%dir %{progdir}/browser/extensions
|
||||
%dir %{progdir}/browser/extensions/
|
||||
|
||||
%files translations-other -f %{_tmppath}/translations.other
|
||||
%defattr(-,root,root)
|
||||
%dir %{progdir}
|
||||
%dir %{progdir}/browser/extensions
|
||||
%dir %{progdir}/browser/extensions/
|
||||
%endif
|
||||
|
||||
# this package does not need to provide files but is needed to fulfill
|
||||
|
||||
17
_constraints
17
_constraints
@ -2,7 +2,7 @@
|
||||
<constraints>
|
||||
<hardware>
|
||||
<disk>
|
||||
<size unit="G">25</size>
|
||||
<size unit="G">36</size>
|
||||
</disk>
|
||||
<memory>
|
||||
<size unit="G">8</size>
|
||||
@ -17,12 +17,15 @@
|
||||
<arch>armv7l</arch>
|
||||
</conditions>
|
||||
<hardware>
|
||||
<memoryperjob>
|
||||
<size unit="M">1000</size>
|
||||
</memoryperjob>
|
||||
<disk>
|
||||
<size unit="G">12</size>
|
||||
</disk>
|
||||
<memory>
|
||||
<physicalmemory>
|
||||
<size unit="G">5</size>
|
||||
</memory>
|
||||
</physicalmemory>
|
||||
</hardware>
|
||||
</overwrite>
|
||||
<overwrite>
|
||||
@ -30,9 +33,13 @@
|
||||
<arch>aarch64</arch>
|
||||
</conditions>
|
||||
<hardware>
|
||||
<memory>
|
||||
<processors>4</processors>
|
||||
<memoryperjob>
|
||||
<size unit="M">1000</size>
|
||||
</memoryperjob>
|
||||
<physicalmemory>
|
||||
<size unit="G">12</size>
|
||||
</memory>
|
||||
</physicalmemory>
|
||||
</hardware>
|
||||
</overwrite>
|
||||
<overwrite>
|
||||
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:380d9853e0712442ba2d4acd85c0e09c19ad36561a3ea8932705ad6b8a91146a
|
||||
size 335316448
|
||||
@ -1,16 +0,0 @@
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl88jDEACgkQ8aZmj7t9
|
||||
Vy7ASg//fLaiXd9rA7/DVLu3TPXAkjCHzgvmH6Y/nwL/Q1Dztv/MxzbBWDRdqP0G
|
||||
LYm2aYP7iRQCxe5qk3VLgshaRzS+GCkzcz8k2zlEbeTJ8i8Yrs4XF3gETmuorU+2
|
||||
ZSzDyK9/RAviDpVa7iRSX5PVBMlBI0j5os3X13ipjRxnYnQnesvV+4/YRblX8W/o
|
||||
3GjLrm8eRPzglZyxrD6Q2fSPJAGkY/lfJqekkMI3iyq/DPFi3wXPSmiw8r8HFbb9
|
||||
Lx6WNF78Tl8aNgsOBHUdYo6qk1v00sejP4OUls9o+VWQOMdVRocoqXo4g7U8Zk+j
|
||||
P2Tsu4RDsGDo8H3MtG/oRz4RM+wTSVxNC59FWKHsRlPS5q1OmQRltL/ZE0K3+A0z
|
||||
0S8rHUT9XMWHSmVvqlAOXHPXy0C050j8NXxMhST3vGC8dHpmUAPOHGQUrLRkHucn
|
||||
uidMFANuvN9QVh5QjYAddA0yHqqkZonPVIKWAv7Den2daS9Hnw1n33XnQIzuggkD
|
||||
gDTT9hfcxp0Vk0TGR5WXlpku9BBHIUOrmV3MnfN+vHXyrTONrx2Q3JwhzgCCvNTr
|
||||
mTf8MEOyjo8NdSQ1IwI5vmi48XLnO/XyvBQmiP2YLzx3G2mgZPFiwdauKT0dQset
|
||||
enamKTFG3DUoOxW/yFxAwxwW5l/44z8Rv82FPUFp7Kgz5wrR7oI=
|
||||
=/g2L
|
||||
-----END PGP SIGNATURE-----
|
||||
3
firefox-81.0.1.source.tar.xz
Normal file
3
firefox-81.0.1.source.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:7eac8d3eaaf580e0f30e9bd79d798c3138aaa5fa2737616fa08c588b730e8fff
|
||||
size 338268036
|
||||
16
firefox-81.0.1.source.tar.xz.asc
Normal file
16
firefox-81.0.1.source.tar.xz.asc
Normal file
@ -0,0 +1,16 @@
|
||||
-----BEGIN PGP SIGNATURE-----
|
||||
|
||||
iQIzBAABCgAdFiEECXsxMHeuYqAvhNpN8aZmj7t9Vy4FAl90xbEACgkQ8aZmj7t9
|
||||
Vy6qlw/9E81nELZCpAGu1jph9WaPlFUqoy3fPp8/CYcGJqWNhspanGfVHHWbX9Of
|
||||
TZbzhzx4SU11F1ZfZ8JEDIuUgy7cEdUhWWviTVkeArp6KzGFOBBGasTLSH5FSHUW
|
||||
efpzpkScOdn6xzVqSzxqwVh+pPwmPwzmUeDY+/ret5cD2u1XbuIxAxb64Qfrfv5p
|
||||
sgoqYmmRCMvPDSakUn9if8gy9tCgoe8uwuX9sqiDjmKs/dEEXQN5OBV+564XvZZ+
|
||||
kfuAgCSWF5ZQGkKUIqLFkYKzGrPspB7xj0/sGroaAUFZzFv7z/Y7r5JayiYk38cT
|
||||
Ntvr2dtn1Hw+sbc3ll89TlXqNH5y31yvem17w9+NfFYmQF1a6aEgpdWbZIeOpZN7
|
||||
vKh1D5np1l/edb83omCmN/I4V3t2tKNdkmXS4jvgS3M08MZS4QSAStSOaaqQJjpa
|
||||
wEvWh7oPD4fFJCgXMkrdxTK4HstjtT/efd5nANfy+xI+/EHjVJuJ8Lbv3tQIhaOV
|
||||
or4AG2kWBvcnOQ4oV2v3+WLxgWqDn4+LxOzF0qp9kYH2nEE7BnVknMi2qmlucEFB
|
||||
47WtVDmuWPC8tlFAbl7PKz0EayYcfT16FgMHh7kTOQG63PiTZEb8jXJNwvYGelYs
|
||||
irqnRLdemqR4UOwJCs2rcXFb/FulDWmwCecoOogKF0Xxgj20Ss0=
|
||||
=1zoN
|
||||
-----END PGP SIGNATURE-----
|
||||
@ -1,3 +0,0 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:fe3ea0d8cec71c6d8b6b4d642e2c0bb115bdafa106085e7cd3cccea43c992150
|
||||
size 53010496
|
||||
3
l10n-81.0.1.tar.xz
Normal file
3
l10n-81.0.1.tar.xz
Normal file
@ -0,0 +1,3 @@
|
||||
version https://git-lfs.github.com/spec/v1
|
||||
oid sha256:d04856a48619186e0a9b51f313e13ae031d33da8e5dae24c29fe472bad926ebb
|
||||
size 48826756
|
||||
@ -3,7 +3,7 @@
|
||||
# Date 1559294891 -7200
|
||||
# Fri May 31 11:28:11 2019 +0200
|
||||
# Node ID c2aa7198fb925e7fde96abf65b6f68b9b755f112
|
||||
# Parent a22a4c4e41107a0809c33a83e9d14916738c5a82
|
||||
# Parent e89d21ead66fbb34b6349edda42748a3ad9e6136
|
||||
Description: Add KDE integration to Firefox (toolkit parts)
|
||||
Author: Wolfgang Rosenauer <wolfgang@rosenauer.org>
|
||||
Author: Lubos Lunak <lunak@suse.com>
|
||||
@ -31,7 +31,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
|
||||
#ifdef MOZ_MEMORY
|
||||
# include "mozmemory.h"
|
||||
#endif
|
||||
@@ -4530,25 +4531,37 @@ nsresult Preferences::InitInitialObjects
|
||||
@@ -4536,25 +4537,37 @@ nsresult Preferences::InitInitialObjects
|
||||
// application pref files for backwards compatibility.
|
||||
static const char* specialFiles[] = {
|
||||
#if defined(XP_MACOSX)
|
||||
@ -69,7 +69,7 @@ diff --git a/modules/libpref/Preferences.cpp b/modules/libpref/Preferences.cpp
|
||||
|
||||
// Load jar:$app/omni.jar!/defaults/preferences/*.js
|
||||
// or jar:$gre/omni.jar!/defaults/preferences/*.js.
|
||||
@@ -4594,17 +4607,17 @@ nsresult Preferences::InitInitialObjects
|
||||
@@ -4600,17 +4613,17 @@ nsresult Preferences::InitInitialObjects
|
||||
}
|
||||
|
||||
nsCOMPtr<nsIFile> path = do_QueryInterface(elem);
|
||||
@ -175,7 +175,7 @@ diff --git a/toolkit/components/downloads/moz.build b/toolkit/components/downloa
|
||||
diff --git a/toolkit/mozapps/downloads/HelperAppDlg.jsm b/toolkit/mozapps/downloads/HelperAppDlg.jsm
|
||||
--- a/toolkit/mozapps/downloads/HelperAppDlg.jsm
|
||||
+++ b/toolkit/mozapps/downloads/HelperAppDlg.jsm
|
||||
@@ -1203,36 +1203,66 @@ nsUnknownContentTypeDialog.prototype = {
|
||||
@@ -1239,36 +1239,66 @@ nsUnknownContentTypeDialog.prototype = {
|
||||
params.handlerApp &&
|
||||
params.handlerApp.executable &&
|
||||
params.handlerApp.executable.isFile()
|
||||
@ -1293,11 +1293,11 @@ diff --git a/uriloader/exthandler/unix/nsOSHelperAppService.cpp b/uriloader/exth
|
||||
diff --git a/widget/gtk/moz.build b/widget/gtk/moz.build
|
||||
--- a/widget/gtk/moz.build
|
||||
+++ b/widget/gtk/moz.build
|
||||
@@ -133,16 +133,17 @@ include('/ipc/chromium/chromium-config.m
|
||||
FINAL_LIBRARY = 'xul'
|
||||
@@ -134,16 +134,17 @@ FINAL_LIBRARY = 'xul'
|
||||
|
||||
LOCAL_INCLUDES += [
|
||||
'/layout/base',
|
||||
'/layout/forms',
|
||||
'/layout/generic',
|
||||
'/layout/xul',
|
||||
'/other-licenses/atk-1.0',
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
# HG changeset patch
|
||||
# Parent f530b1587cd1c0a79c34f91a9690c4cc4c33ac31
|
||||
# Parent 5bd7b491505076dc38ba1efc7c406b9c53ba8389
|
||||
|
||||
diff --git a/config/system-headers.mozbuild b/config/system-headers.mozbuild
|
||||
--- a/config/system-headers.mozbuild
|
||||
@ -65,13 +65,13 @@ diff --git a/media/webrtc/trunk/webrtc/modules/desktop_capture/BUILD.gn b/media/
|
||||
diff --git a/media/webrtc/trunk/webrtc/modules/desktop_capture/desktop_capture_generic_gn/moz.build b/media/webrtc/trunk/webrtc/modules/desktop_capture/desktop_capture_generic_gn/moz.build
|
||||
--- a/media/webrtc/trunk/webrtc/modules/desktop_capture/desktop_capture_generic_gn/moz.build
|
||||
+++ b/media/webrtc/trunk/webrtc/modules/desktop_capture/desktop_capture_generic_gn/moz.build
|
||||
@@ -289,16 +289,40 @@ if CONFIG["OS_TARGET"] == "WINNT":
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/win/screen_capturer_win_directx.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/win/screen_capturer_win_magnifier.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/win/win_shared.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/win/window_capture_utils.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/window_capturer_win.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/window_finder_win.cc"
|
||||
@@ -112,16 +112,39 @@ if CONFIG["OS_TARGET"] == "DragonFly":
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/linux/x_atom_cache.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/linux/x_error_trap.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/linux/x_server_pixel_buffer.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/mouse_cursor_monitor_linux.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/screen_capturer_linux.cc",
|
||||
"/media/webrtc/trunk/webrtc/modules/desktop_capture/window_capturer_linux.cc"
|
||||
]
|
||||
|
||||
+# PipeWire specific files
|
||||
@ -97,8 +97,7 @@ diff --git a/media/webrtc/trunk/webrtc/modules/desktop_capture/desktop_capture_g
|
||||
+ "/media/webrtc/trunk/webrtc/modules/desktop_capture/linux/window_capturer_pipewire.cc"
|
||||
+ ]
|
||||
+
|
||||
+
|
||||
if CONFIG["OS_TARGET"] == "NetBSD":
|
||||
if CONFIG["OS_TARGET"] == "FreeBSD":
|
||||
|
||||
DEFINES["USE_X11"] = "1"
|
||||
DEFINES["WEBRTC_BSD"] = True
|
||||
|
||||
@ -1,16 +1,49 @@
|
||||
From: meissner@suse.com
|
||||
From: meissner@suse.com, cgrobertson@suse.com
|
||||
Subject: allow Firefox to access addtional process information
|
||||
Reference: http://bugzilla.suse.com/show_bug.cgi?id=1167132
|
||||
References:
|
||||
http://bugzilla.suse.com/show_bug.cgi?id=1167132
|
||||
bsc#1174284 - Firefox tab just crashed in FIPS mode
|
||||
|
||||
Index: firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
===================================================================
|
||||
--- firefox-74.0.orig/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
+++ firefox-74.0/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
@@ -276,6 +276,7 @@ SandboxBrokerPolicyFactory::SandboxBroke
|
||||
diff --git a/security/sandbox/linux/Sandbox.cpp b/security/sandbox/linux/Sandbox.cpp
|
||||
--- a/security/sandbox/linux/Sandbox.cpp
|
||||
+++ b/security/sandbox/linux/Sandbox.cpp
|
||||
@@ -647,16 +647,17 @@ void SetMediaPluginSandbox(const char* a
|
||||
SANDBOX_LOG_ERROR("failed to open plugin file %s: %s", aFilePath,
|
||||
strerror(errno));
|
||||
MOZ_CRASH("failed while trying to open the plugin file ");
|
||||
}
|
||||
|
||||
auto files = new SandboxOpenedFiles();
|
||||
files->Add(std::move(plugin));
|
||||
files->Add("/dev/urandom", true);
|
||||
+ files->Add("/dev/random", true);
|
||||
files->Add("/etc/ld.so.cache"); // Needed for NSS in clearkey.
|
||||
files->Add("/sys/devices/system/cpu/cpu0/tsc_freq_khz");
|
||||
files->Add("/sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq");
|
||||
files->Add("/proc/cpuinfo"); // Info also available via CPUID instruction.
|
||||
files->Add("/proc/sys/crypto/fips_enabled"); // Needed for NSS in clearkey.
|
||||
#ifdef __i386__
|
||||
files->Add("/proc/self/auxv"); // Info also in process's address space.
|
||||
#endif
|
||||
diff --git a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
--- a/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
+++ b/security/sandbox/linux/broker/SandboxBrokerPolicyFactory.cpp
|
||||
@@ -308,16 +308,18 @@ void SandboxBrokerPolicyFactory::InitCon
|
||||
policy->AddDir(rdwr, "/dev/dri");
|
||||
}
|
||||
|
||||
// Bug 1575985: WASM library sandbox needs RW access to /dev/null
|
||||
policy->AddPath(rdwr, "/dev/null");
|
||||
|
||||
// Read permissions
|
||||
policy->AddPath(rdonly, "/dev/urandom");
|
||||
+ policy->AddPath(rdonly, "/dev/random");
|
||||
+ policy->AddPath(rdonly, "/proc/sys/crypto/fips_enabled");
|
||||
policy->AddPath(rdonly, "/proc/cpuinfo");
|
||||
policy->AddPath(rdonly, "/proc/meminfo");
|
||||
policy->AddDir(rdonly, "/sys/devices/cpu");
|
||||
policy->AddDir(rdonly, "/sys/devices/system/cpu");
|
||||
policy->AddDir(rdonly, "/lib");
|
||||
policy->AddDir(rdonly, "/lib64");
|
||||
policy->AddDir(rdonly, "/usr/lib");
|
||||
policy->AddDir(rdonly, "/usr/lib32");
|
||||
|
||||
@ -1,52 +0,0 @@
|
||||
# HG changeset patch
|
||||
# User Wolfgang Rosenauer <wr@rosenauer.org>
|
||||
# Parent 3804871eac4171b99e9049dbc881b5304b5ac207
|
||||
|
||||
diff --git a/dom/system/IOUtils.cpp b/dom/system/IOUtils.cpp
|
||||
--- a/dom/system/IOUtils.cpp
|
||||
+++ b/dom/system/IOUtils.cpp
|
||||
@@ -9,19 +9,19 @@
|
||||
#include "mozilla/dom/IOUtils.h"
|
||||
#include "mozilla/dom/Promise.h"
|
||||
#include "mozilla/ErrorNames.h"
|
||||
#include "mozilla/Result.h"
|
||||
#include "mozilla/ResultExtensions.h"
|
||||
#include "mozilla/Services.h"
|
||||
#include "mozilla/Span.h"
|
||||
#include "mozilla/TextUtils.h"
|
||||
-#include "nspr/prio.h"
|
||||
-#include "nspr/private/pprio.h"
|
||||
-#include "nspr/prtypes.h"
|
||||
+#include "prio.h"
|
||||
+#include "private/pprio.h"
|
||||
+#include "prtypes.h"
|
||||
#include "nsDirectoryServiceDefs.h"
|
||||
#include "nsIFile.h"
|
||||
#include "nsIGlobalObject.h"
|
||||
#include "nsNativeCharsetUtils.h"
|
||||
#include "nsReadableUtils.h"
|
||||
#include "nsString.h"
|
||||
#include "nsThreadManager.h"
|
||||
#include "SpecialSystemDirectory.h"
|
||||
diff --git a/dom/system/IOUtils.h b/dom/system/IOUtils.h
|
||||
--- a/dom/system/IOUtils.h
|
||||
+++ b/dom/system/IOUtils.h
|
||||
@@ -9,17 +9,17 @@
|
||||
|
||||
#include "mozilla/AlreadyAddRefed.h"
|
||||
#include "mozilla/DataMutex.h"
|
||||
#include "mozilla/dom/BindingDeclarations.h"
|
||||
#include "mozilla/dom/IOUtilsBinding.h"
|
||||
#include "mozilla/dom/TypedArray.h"
|
||||
#include "mozilla/ErrorResult.h"
|
||||
#include "mozilla/MozPromise.h"
|
||||
-#include "nspr/prio.h"
|
||||
+#include "prio.h"
|
||||
#include "nsIAsyncShutdown.h"
|
||||
#include "nsISerialEventTarget.h"
|
||||
#include "nsLocalFile.h"
|
||||
|
||||
namespace mozilla {
|
||||
|
||||
/**
|
||||
* Utility class to be used with |UniquePtr| to automatically close NSPR file
|
||||
25
revert-795c8762b16b.patch
Normal file
25
revert-795c8762b16b.patch
Normal file
@ -0,0 +1,25 @@
|
||||
diff --git a/build/moz.configure/lto-pgo.configure b/build/moz.configure/lto-pgo.configure
|
||||
--- a/build/moz.configure/lto-pgo.configure
|
||||
+++ b/build/moz.configure/lto-pgo.configure
|
||||
@@ -224,17 +224,20 @@ def lto(value, c_compiler, ld64_known_go
|
||||
#
|
||||
# https://github.com/llvm/llvm-project/blob/e7694f34ab6a12b8bb480cbfcb396d0a64fe965f/llvm/lib/Target/X86/X86.td#L1165-L1187
|
||||
if target.cpu == 'x86_64':
|
||||
ldflags.append('-mllvm:-mcpu=x86-64')
|
||||
# We do not need special flags for arm64. Hooray for fixed-length
|
||||
# instruction sets.
|
||||
else:
|
||||
num_cores = multiprocessing.cpu_count()
|
||||
- cflags.append("-flto")
|
||||
+ if len(value) and value[0].lower() == 'full':
|
||||
+ cflags.append("-flto")
|
||||
+ else:
|
||||
+ cflags.append("-flto=thin")
|
||||
cflags.append("-flifetime-dse=1")
|
||||
|
||||
ldflags.append("-flto=%s" % num_cores)
|
||||
ldflags.append("-flifetime-dse=1")
|
||||
|
||||
# Tell LTO not to inline functions above a certain size, to mitigate
|
||||
# binary size growth while still getting good performance.
|
||||
# (For hot functions, PGO will put a multiplier on this limit.)
|
||||
@ -1,11 +1,11 @@
|
||||
PRODUCT="firefox"
|
||||
CHANNEL="release"
|
||||
VERSION="80.0"
|
||||
VERSION="81.0.1"
|
||||
VERSION_SUFFIX=""
|
||||
PREV_VERSION="79.0"
|
||||
PREV_VERSION="81.0"
|
||||
PREV_VERSION_SUFFIX=""
|
||||
#SKIP_LOCALES="" # Uncomment to skip l10n and compare-locales-generation
|
||||
|
||||
RELEASE_REPO="https://hg.mozilla.org/releases/mozilla-release"
|
||||
RELEASE_TAG="bd5d1f49975deb730064a16b3079edb53c4a5f84"
|
||||
RELEASE_TIMESTAMP="20200818235255"
|
||||
RELEASE_TAG="0df30c09d098468f2f4632e62aec0954b6174dc5"
|
||||
RELEASE_TIMESTAMP="20200930150533"
|
||||
|
||||
Loading…
Reference in New Issue
Block a user