Bob Owen
5296f7918c
Bug 1150515: Set the subsystem to WINDOWS,5.02 for wow_helper so that it runs on WinXP 64-bit. r=glandium
2015-04-30 09:48:03 +01:00
Masatoshi Kimura
d525ec2ddf
Bug 1145844 - Update fallback whitelist. r=keeler
2015-04-29 13:48:53 +09:00
David Major
ed6ca74f4f
Bug 1157835: Remove the MSVC_ENABLE_PGO flag from the build system. r=glandium
2015-04-27 19:59:27 -04:00
Carsten "Tomcat" Book
6723c48492
merge fx-team to mozilla-central a=merge
2015-04-27 12:34:03 +02:00
Carsten "Tomcat" Book
58d66ec4c2
merge mozilla-inbound to mozilla-central a=merge
2015-04-27 12:00:14 +02:00
ffxbld
e75a8d5509
No bug, Automated HPKP preload list update from host bld-linux64-spot-039 - a=hpkp-update
2015-04-25 03:32:33 -07:00
ffxbld
75d3eb75f3
No bug, Automated HSTS preload list update from host bld-linux64-spot-039 - a=hsts-update
2015-04-25 03:32:31 -07:00
Jed Davis
08ad176577
Bug 1154184 - Don't use Linux sandbox gtest dir if not building tests. r=gps
2015-04-24 17:36:08 -07:00
Dave Townsend
1944329bf2
Bug 1038068: Check add-on signatures and refuse to install unsigned or broken add-ons (preffed off for now). r=dveditz
2015-03-31 11:32:40 -07:00
Carsten "Tomcat" Book
c76ef69f41
merge mozilla-inbound to mozilla-central a=merge
2015-04-24 14:37:13 +02:00
Richard Barnes
5491d34ed0
Bug 1121982 - Update PSM to use NSS name constraints
2015-04-23 20:26:29 -04:00
Fabrice Desré
38ad54b96f
Bug 1144600 - Don't crash when submitting <keygen> on b2g r=dkeeler
2015-04-23 13:35:49 -07:00
Blake Kaplan
990f9cce74
Bug 1124076 - Properly detect certs when loaded and prompt to import them. r=sworkman/dkeeler
2015-04-22 12:55:23 -07:00
Steven Michaud
39973baa42
Bug 1153809 - Loosen Mac content process sandbox rules for NVidia and Intel HD 3000 graphics hardware. r=areinald
2015-04-22 14:56:09 -05:00
David Keeler
d3dd0e4ad0
bug 1157873 - remove certificates from CNNIC whitelist that aren't in the Pilot Certificate Transparency log r=rbarnes
...
Also remove certificates where notBefore is on or after 1 April 2015.
2015-04-21 16:07:33 -07:00
Nathan Toone
7adc7f55e1
Bug 1124076 followup - fix the build when PR_LOGGING is not defined. r=mrbkap
2015-04-23 13:24:57 -07:00
David Keeler
aff5e06e02
bug 1081128 - test_pinning.js takes ~300 seconds on b2g debug emulator - request a longer timeout for it r=Cykesiopka
2015-04-22 11:06:36 -07:00
Kai Engert
8ed2b0ac69
Bug 1144055 - Upgrade Firefox 39 to use NSS 3.19, r=nss-confcall
2015-04-23 21:16:20 +02:00
Francois Marier
14bd6c01dd
Bug 1147212 - Add support for goog-unwanted-shavar. r=gcp,r=matej,r=smaug
2015-04-22 21:01:37 +12:00
Carsten "Tomcat" Book
d9db24c44a
Backed out changeset 7f3cf84c11a9 (bug 1124076) for bustage on a CLOSED TREE
2015-04-22 13:44:23 +02:00
Blake Kaplan
414c6adc45
Bug 1124076 - Properly detect certs when loaded and prompt to import them. r=sworkman/dkeeler
2015-04-21 14:56:00 +02:00
Ehsan Akhgari
0915a15420
Bug 1153348 - Add an analysis to prohibit operator bools which aren't marked as either explicit or MOZ_IMPLICIT; r=jrmuizel
...
This is the counterpart to the existing analysis to catch
constructors which aren't marked as either explicit or
MOZ_IMPLICIT.
2015-04-21 21:40:49 -04:00
André Reinald
17de8bc267
Bug 1150765 - Add sandbox rules to allow hardware rendering of OpenGL on Mac. r=smichaud
2015-04-21 11:17:16 +02:00
Patrick McManus
2128024376
bug 1153212 - Alt-Svc Fixes r=dkeeler r=hurley
2015-04-13 17:11:59 -04:00
Kai Engert
6736041d5a
Bug 1144055, Upgrade Firefox 39 to use NSS 3.19, NSS_3_19_BETA4 to pick up bug 1155279
2015-04-20 21:46:19 +02:00
Phil Ringnalda
f9dd538484
Merge m-i to m-c, a=merge
2015-04-18 16:36:32 -07:00
ffxbld
f956e116af
No bug, Automated HPKP preload list update from host bld-linux64-spot-222 - a=hpkp-update
2015-04-18 03:29:47 -07:00
ffxbld
344fd7aa41
No bug, Automated HSTS preload list update from host bld-linux64-spot-222 - a=hsts-update
2015-04-18 03:29:45 -07:00
David Keeler
aef2b30e4e
bug 1150114 - allow PrintableString to match UTF8String in name constraints checking r=briansmith
2015-04-08 16:17:39 -07:00
Kai Engert
b891161b8d
Bug 1144055 - Upgrade Firefox 39 to use NSS 3.19, land NSS_3_19_BETA2, r=nss-confcall
2015-04-17 13:49:43 +02:00
Neil Deakin
0e272ede50
Bug 1153248, re-enable a bunch of tests that now work with e10s, r=billm
2015-04-16 15:38:12 -04:00
David Keeler
87964c3250
bug 1151512 - only allow whitelisted certificates to be issued by CNNIC root certificates r=jcj r=rbarnes
2015-04-07 17:29:05 -07:00
Kai Engert
ef9f840356
Bug 1144055 - Upgrade Firefox 39 to use NSS 3.19, land NSS_3_19_BETA3, r=nss-confcall
2015-04-17 18:43:30 +02:00
David Keeler
ef38913727
bug 1147497 - Add API for querying site pin status. Disallow overrides for sites that have pins. r=mmc r=smaug r=cykesiopka r=past
2015-03-25 11:04:49 -07:00
Brian Smith
83c90debbf
Bug 1154399 - Part 4: Simplify certificate parsing in OCSP responses. r=keeler
2015-04-14 05:33:03 -10:00
Brian Smith
0cc9d436df
Bug 1154399 - Part 3: Simplify OptionalExtensions. r=keeler
...
We used to avoid using Nested and NestedOf because they were based on
bind and it was difficult to maintain our std::bind polyfill. Now that
we use lambdas, it is easy to use Nested and NestedOf, so we should do
so wherever it makes the code clearer.
2015-04-14 05:32:46 -10:00
Brian Smith
dc0d3cf78e
Bug 1154399 - Part 2: Simplify and un-inline OptionalVersion. r=keeler
...
Also fixes the wrong comment. The syntax for version in OCSP and X.509
certs is identical.
2015-04-14 05:32:29 -10:00
Brian Smith
10450b2670
Bug 1154399 - Part 1: De-templatize and un-inline IntegralValue. r=keeler
2015-04-14 05:06:41 -10:00
Nathan Froyd
8b2c8c2c8e
Bug 1137437 - move security/apps/ cert header generation to moz.build; r=mshal,keeler
...
Moving the cert header generation to GENERATED_FILES means that we can
delete all the manually-written out rules; we can also delete the
export:: rule because the build system automatically builds
GENERATED_FILES during the export phase. For ease of converion, we opt
to create an empty trusted-app-public.der cert for manifest-signing-root.inc;
partners are free to overwrite that cert with their own.
2015-02-27 12:50:49 -05:00
Mike Hommey
4cff7b2866
Bug 1153114 - Remove anonymous namespace around pkix gtests. r=bsmith
...
This avoids -Wunused-variable fatal warnings with GCC 5.0
2015-04-15 09:21:23 +09:00
Landry Breuil
e18d614081
Bug 1153090 followup - consistently use sizeof(hash) r=dkeeler
2015-04-14 22:19:18 +02:00
Landry Breuil
701acba976
Bug 1153090 - Unaligned access in cert block list (r=keeler)
2015-04-14 21:19:52 +02:00
Jan Beich
b9b92e7e47
Bug 1154188 - Unbreak build on non-SPS platforms after bug 1153737 r=bsmith
2015-04-14 14:30:09 +02:00
Brian Smith
e3b9248715
Bug 1153738: Make ScopedPtr a minimal proper subset of std::unique_ptr, r=keeler
...
Remove all features of ScopedPtr that aren't in std::unique_ptr, and
remove all currently-unused features of ScopedPtr. In particular,
replace |operator=(T*)| with |reset(T* p = nullptr)| and make
|operator bool| explicit.
2015-04-13 00:28:11 -10:00
Brian Smith
2bbc1d7a0d
Bug 1153737: Avoid unnecessary uses of mozilla::pkix::ScopedPtr, r=keeler
2015-04-12 19:57:48 -10:00
Carsten "Tomcat" Book
aa93bc5d24
merge mozilla-inbound to mozilla-central a=merge
2015-04-13 12:00:00 +02:00
ffxbld
7009fe93d0
No bug, Automated HPKP preload list update from host bld-linux64-spot-009 - a=hpkp-update
2015-04-11 03:29:55 -07:00
ffxbld
2d0f3a5b62
No bug, Automated HSTS preload list update from host bld-linux64-spot-009 - a=hsts-update
2015-04-11 03:29:53 -07:00
Jed Davis
cbeb84fc46
Bug 1151607 - Step 2: Apply net/ipc namespace separation and chroot to media plugins. r=kang
...
This needs more unit tests for the various pieces of what's going on
here (LinuxCapabilities, SandboxChroot, UnshareUserNamespace()) but
that's nontrivial due to needing a single-threaded process -- and
currently they can't be run on Mozilla's CI anyway due to needing user
namespaces, and local testing can just try using GMP and manually
inspecting the child process. So that will be a followup.
2015-04-10 18:05:19 -07:00
Jed Davis
8df433f25a
Bug 1151607 - Step 1.5: Avoid unlikely false positives in Linux SandboxInfo feature detection. r=kang
...
Using the equivalent of release assertions in the patch after this one
is easier to justify if I can't come up with vaguely legitimate reasons
why they might fail; this detects the ones I thought of.
2015-04-10 18:05:19 -07:00
