Ryan VanderMeulen
7b427c4565
Merge m-c to inbound.
2014-04-26 21:41:26 -04:00
ffxbld
18f2d06933
No bug, Automated HSTS preload list update from host bld-linux64-spot-425 - a=hsts-update
2014-04-26 03:23:23 -07:00
Nathan Toone
15d86a0541
Bug 1001585 - Don't build tests directory if --disable-tests is specified. r=briansmith
2014-04-26 11:29:00 -04:00
Arpad Borsos
0ffd585a0c
Bug 474369 - remove nsVoidArray includes; r=ehsan
...
--HG--
extra : rebase_source : dd3abeb623fd8b784fd6ba639c88def84a4daf58
2014-04-26 16:12:45 +02:00
Camilo Viecco
4515570905
Bug 915930 - Make mozilla::pkix the default certificate verifier for all (not just desktop) r=briansmith
...
--HG--
extra : rebase_source : 56402e60078298dc64cf5476afda7c95671a7092
2014-04-25 13:22:30 -07:00
Wan-Teh Chang
fa30218813
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1 Beta 2.
2014-04-25 06:06:01 -07:00
Honza Bambas
782f02bd55
Bug 999306 - Add 'allow-insecure-ntlm-v1' preference for the generic NTLM v1 authentication module, r=jduell
2014-04-24 18:50:46 +02:00
Stefan Arentz
c929461f38
Bug 968490: Add mozilla::pkix::der unit tests (r=cviecco)
2014-03-26 16:00:03 -07:00
Randell Jesup
c39b1723d8
Bug 996487: don't null out mThread while committing thread suicide r=bsmedberg
2014-04-22 15:32:13 -04:00
YFdyh000
7209169dc8
Bug 995528 - Certificate viewer describes not-valid-before date as issue date. r=honzab, ui-r=philipp
2014-04-21 10:58:04 -04:00
ffxbld
1a30be1a44
No bug, Automated HSTS preload list update from host bld-linux64-spot-454 - a=hsts-update
2014-04-19 03:14:16 -07:00
Randell Jesup
88cb135bdf
Bug 988881: clean up CryptoTask (SignedJar) tasks instead of leaking them r=bsmedberg,mayhemer
2014-04-17 02:18:04 -04:00
Anuj Agarwal
0dc21bc644
Bug 897359 - Remove unimplemented popChallengeResponse, random, and disableRightClick methods. r=bz
2014-04-18 09:32:52 -04:00
David Keeler
284f933831
bug 991898 - mozilla::pkix: temporarily allow empty Extensions in OCSP responses r=briansmith
2014-04-17 16:01:18 -07:00
Camilo Viecco
55a077728c
Bug 997795 - Cleanup decodings. r=dkeeler
2014-04-17 14:42:05 -07:00
Jed Davis
d000250ab1
Bug 997409 - Add set_thread_area to seccomp whitelist if available. r=kang
2014-04-17 16:23:23 -04:00
Camilo Viecco
47dd4351c0
Bug 992972 - Add sha256SubjectPublicKeyInfoDigest attribute to nsIX509Cert. sr=bsmith
2014-04-07 10:35:57 -07:00
David Keeler
63e2eca97a
bug 997843 - mozilla::pkix::der::Input::Expect should take a uint16_t as its length argument r=briansmith
2014-04-17 09:50:06 -07:00
Patrick McManus
a142639b4a
bug 993591 - PSM HTTP Fetch should own streamloader data r=dkeller r=mayhemmer
2014-04-09 17:48:17 -04:00
David Keeler
019398a53c
bug 982774 - der::ExpectTagAndGetLength: check that input has enough capacity for the length described r=briansmith
2014-04-16 13:30:09 -07:00
David Keeler
5deb7798b1
bug 972753 - OCSP testing: delegated responses and including multiple certificates r=cviecco
2014-04-16 09:31:27 -07:00
Raymond Etornam Agbeame(:retornam)
699e03848f
Bug 934676 - Remove unused variable 'extracted' in ClientAuthDataRunnable::RunOnTargetThread. r=keeler
2014-04-15 15:46:00 +02:00
Monica Chew
1b724bad01
Bug 991177: Disallow overrides for SEC_ERROR_CA_CERT_INVALID (r=keeler)
2014-04-15 15:35:41 -07:00
Kyle Huey
c8e649664b
Bug 991812: Remove uses of AtomicRefCounted<T> that live in Gecko. r=ehsan
...
--HG--
extra : rebase_source : 0d14e02c64d548fd3177681248d722683aaa87c3
2014-04-14 12:04:25 -07:00
David Keeler
9b13a83b9e
bug 994932 - fix error checking in GetOCSPResponseForType r=retornam
2014-04-15 14:21:08 -07:00
Jed Davis
528a483b60
Bug 981949 - Whitelist ftruncate for seccomp-bpf sandboxing. r=kang
2014-04-11 13:09:00 +02:00
Bobby Holley
a81ce7e83c
Bug 989528 - Rename AutoSystemCaller to AutoNoJSAPI, and assert against pre-existing exceptions. r=bz
2014-04-14 20:27:00 -07:00
Ryan VanderMeulen
98cf3141ca
Backed out changesets ddbac34527fe and fa82f32d0c39 (bug 991812) for B2G bustage.
...
CLOSED TREE
2014-04-14 16:16:18 -04:00
Kyle Huey
3fb3aae2f9
Bug 991812: Remove uses of AtomicRefCounted<T> that live in Gecko. r=ehsan
2014-04-14 12:04:25 -07:00
Ryan VanderMeulen
f6ce616a14
Merge m-c to inbound on a CLOSED TREE.
2014-04-13 22:52:50 -04:00
ffxbld
2c156df92e
No bug, Automated HSTS preload list update from host bld-linux64-spot-327 - a=hsts-update
2014-04-12 03:21:26 -07:00
Mike Kaply
a707c6fd1c
Bug #993846 - Add missing stringbundle, r=kaie
2014-04-11 10:07:02 -05:00
David Keeler
af54147666
bug 993186 - improve test_cert_eku generator r=cviecco
2014-04-09 11:04:00 -07:00
Jed Davis
58a72fe315
Bug 993145 - Skip attempting seccomp sandboxing if seccomp unavailable. r=kang
2014-04-09 15:23:00 +02:00
Bob Owen
6fdbe1f12a
Bug 928062 - Set Windows sandbox delayed integrity level to INTEGRITY_LEVEL_LOW. r=aklotz
2014-04-08 16:25:18 +01:00
Boris Zbarsky
44e75b0cc9
Bug 995047 followup. Fix a caller that I missed because it's only compiled on some platforms, so we can reopen the CLOSED TREE
2014-04-12 00:38:06 -04:00
David Keeler
d4dd4d5972
bug 991209 - mozilla::pkix: allow non-end-entity certs to have OCSP signing EKU r=briansmith
2014-04-10 10:15:02 -07:00
Boris Zbarsky
fdbb455d4f
Bug 991742 part 8. Remove the "aScope" argument of WebIDL/nsWrapperCache WrapObject() methods. r=bholley
...
This patch was mostly generated with the following command:
find . -name "*.h" -o -name "*.cpp" | xargs sed -e '/WrapObject(JSContext/ {; N; s/\(WrapObject(JSContext *\* *a\{0,1\}[Cc]x\),\n\{0,1\} *JS::Handle<JSObject\*> a\{0,1\}[sS]cope/\1/ ; }' -i ""
and then reverting the changes that made to
dom/bindings/BindingUtils.h, since those WrapObject methods are not
the ones we're trying to change here, plus a bunch of manual fixups
for cases that this command did not catch (including all the callsites
of WrapObject()).
2014-04-08 18:27:18 -04:00
Boris Zbarsky
3f26a82832
Bug 991742 part 6. Remove the "aScope" argument of binding Wrap() methods. r=bholley
...
This patch was mostly generated with this command:
find . -name "*.h" -o -name "*.cpp" | xargs sed -e 's/Binding::Wrap(aCx, aScope, this/Binding::Wrap(aCx, this/' -e 's/Binding_workers::Wrap(aCx, aScope, this/Binding_workers::Wrap(aCx, this/' -e 's/Binding::Wrap(cx, scope, this/Binding::Wrap(cx, this/' -i ""
plus a few manual fixes to dom/bindings/Codegen.py, js/xpconnect/src/event_impl_gen.py, and a few C++ files that were not caught in the search-and-replace above.
2014-04-08 18:27:17 -04:00
Camilo Viecco
10037b4a82
Bug 993569 - Update Mozilla 31 to use NSS 3.16.1. (beta1) r=kaie
2014-04-08 11:38:37 -07:00
Michael Shuen
a6438749c0
Bug 984608 - SECKEY_EncodeDERSubjectPublicKeyInfo and PK11_DEREncodePublicKey take non-const SECKEYPublicKey*. r=briansmith
2014-04-08 11:27:31 -07:00
David Keeler
fc4890d5af
bug 990603 - test override for server certificate with basic constraints: CA=true r=briansmith
2014-04-08 09:51:45 -07:00
David Keeler
e1f4b33afd
bug 990603 - mozilla::pkix: defer reporting end-entity cert errors until after path building r=briansmith
2014-04-08 09:49:36 -07:00
Peter Van der Beken
94d6fed69a
Bug 984497 - Use SpecialPowers more and change SpecialPower usage to deal with Window on WebIDL bindings. r=bz.
...
--HG--
rename : content/media/webspeech/synth/test/test_setup.html => content/media/webspeech/synth/test/file_setup.html
rename : content/media/webspeech/synth/test/test_speech_queue.html => content/media/webspeech/synth/test/file_speech_queue.html
rename : content/media/webspeech/synth/test/test_speech_simple.html => content/media/webspeech/synth/test/file_speech_simple.html
extra : rebase_source : 687daf9d78e69fe6ae21f7c1a26503cf88a18b97
2014-02-15 22:12:34 +01:00
Peter Van der Beken
f8dd810da5
Back out 75c95dac7fe0 (bug 984497) and f1b0d3d13755 (bug 990475) to fix bustage on a CLOSED TREE.
...
--HG--
extra : rebase_source : a63315cd428faeb95464f6ad76946d1c0c6d36c3
2014-04-07 22:18:53 +02:00
Peter Van der Beken
3d1f466234
Bug 984497 - Use SpecialPowers more and change SpecialPower usage to deal with Window on WebIDL bindings. r=bz.
...
--HG--
rename : content/media/webspeech/synth/test/test_setup.html => content/media/webspeech/synth/test/file_setup.html
rename : content/media/webspeech/synth/test/test_speech_queue.html => content/media/webspeech/synth/test/file_speech_queue.html
rename : content/media/webspeech/synth/test/test_speech_simple.html => content/media/webspeech/synth/test/file_speech_simple.html
extra : rebase_source : 3662ae8b0f35fefb250c9cd048e848d662863855
2014-02-15 22:12:34 +01:00
Shu-yu Guo
27e788eb59
Bug 989509 - Part 3: security/ (r=cviecco,dkeeler)
2014-04-03 19:29:40 -07:00
Camilo Viecco
316a7698bc
Bug 987816 - Part 2/3. Update tests to match un-regressed behaviour. r=dkeeler
...
--HG--
extra : rebase_source : 7bccc66831f56cede353ec33275449b7bf2560b1
2014-03-31 09:10:13 -07:00
Camilo Viecco
636be006d7
Bug 987816 - Part 2/3. Test verifying certificateUsageVerifyCA can return OK. r= dkeeler
...
--HG--
extra : rebase_source : 8e3f50d58c3c61e0fc843a053370f74d9adac8c0
2014-03-31 09:10:11 -07:00
Camilo Viecco
63c25c1935
Bug 987816 - Part 1/3. Allow verifying with certificateUsageVerifyCA. r=dkeeler
...
--HG--
extra : rebase_source : 7530839c9c02d56936e322f897de96d80a60a18f
2014-03-28 10:21:30 -07:00
Jon Coppeard
bd123acdd3
Bug 959787 - Handlify JS_ExecuteScript and JS::Evaluate APIs r=terrence r=bz
2014-04-01 11:34:39 +01:00
Mike Hommey
610912639c
Bug 988168 - Better integrate gtest libxul in the build system. r=mshal. DONTBUILD
...
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-31 13:21:38 +02:00
Mike Hommey
6d9ddb9419
Backed out changeset 561b9329d832 (bug 988168) for wrong attribution.
2014-04-01 13:17:50 +09:00
Jacek Caban
ce93f06cfd
Bug 988168 - Better integrate gtest libxul in the build system. r=mshal
...
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-31 13:21:38 +02:00
Geoff Brown
0a75445343
Bug 967704 - Skip a few more tests on Android 2.3
2014-03-31 21:30:07 -06:00
David Keeler
86d825d798
bug 989516 - mozilla::pkix: temporarily allow improper basicConstraint:cA encodings r=cviecco
2014-03-31 11:06:43 -07:00
David Keeler
baed8bcd0d
bug 987295 - mozilla::pkix: test ocsp extension decoding r=cviecco
2014-03-31 10:54:53 -07:00
David Keeler
3b98632b58
bug 987295 - mozilla::pkix: fix decoding OCSP response extensions r=cviecco
2014-03-31 13:24:16 -07:00
Camilo Viecco
f28835077e
Bug 986156 - Test anypolicyoid (no inhibit policy) for EV . r=dkeeler
...
--HG--
extra : rebase_source : 004dbe5fc1b168c43f62c5bed8e71d4d67b04754
2014-03-28 10:00:45 -07:00
Camilo Viecco
0b00313052
Bug 986156 - Allow anypolicyoid and reject on inhibitAnypolicy (mozilla::pkix). r=bsmith
...
--HG--
extra : rebase_source : dd61d4bfa64ed65582f3a1b4662f16740983a3ce
2014-03-28 10:00:29 -07:00
Phil Ringnalda
c4c8d9a043
Merge m-i to m-c
2014-03-29 09:00:18 -07:00
ffxbld
3a13794a1c
No bug, Automated HSTS preload list update from host bld-linux64-spot-403 - a=hsts-update
2014-03-29 03:14:50 -07:00
Mike Hommey
8a1f2aefb0
Backout changesets ca413634eba3 and a92851ff7444 (bug 988168) for likely windows PGO perf regression
2014-03-29 16:49:19 +09:00
Jed Davis
c01f7753a7
Bug 989172 - Re-add sigaltstack to seccomp whitelist. r=kang
...
This reinstates the patch from bug 983518, which was unintentionally
dropped while merging with the reorganization in bug 985227.
2014-03-28 17:58:26 -07:00
Wes Kocher
fa738a8c6e
Backed out 2 changesets (bug 987816) for xpcshell orange
...
Backed out changeset 245d0cb5a7b3 (bug 987816)
Backed out changeset b714220dd39d (bug 987816)
2014-03-28 16:57:12 -07:00
Camilo Viecco
52e8b47e95
Bug 987816 - certificateUsageVerifyCA is OK verifcation option. r=dkeeler
...
--HG--
extra : rebase_source : 0e000dc85705e1c61773e8fc73425fe80e0b9134
2014-03-28 10:21:30 -07:00
Camilo Viecco
ecc49b80e7
Bug 987816 - test certificateUsageVerifyCA can return success. r=dkeeler
...
--HG--
rename : toolkit/library/libxul.mk => toolkit/library/Makefile.in
rename : toolkit/library/libxul.mozbuild => toolkit/library/moz.build
extra : rebase_source : 145fd4fce17325ca9e34681f3451c66c33bfd1a1
2014-03-28 15:53:08 -07:00
Mike Hommey
92df8541c3
Bug 988168 - Better integrate gtest libxul in the build system. r=mshal
...
--HG--
rename : toolkit/library/Makefile.in => toolkit/library/libxul.mk
rename : toolkit/library/moz.build => toolkit/library/libxul.mozbuild
2014-03-29 07:50:08 +09:00
Camilo Viecco
ac61a8105c
Bug 982292 - Enhance EKU testing. r=dkeeler
2014-03-18 08:59:37 -07:00
Camilo Viecco
5ecf56aaca
Bug 982292 - Allow nsSGC to 'nest' TLS Web Server Authentication EKU in moz::pkix. r=bsmith
2014-03-13 11:06:44 -07:00
Makoto Kato
99b626932f
Bug 987888 - --enable-content-sandbox breaks 64-bit builds. r=dkeeler,r=mshal
2014-03-28 13:59:16 +09:00
Brian Smith
acad56c360
Bug 982778: Initialize parameters of output value of der::AlgorithmIdentifier, r=keeler
2014-03-13 21:26:03 -07:00
Benjamin Peterson
6628010f7e
Bug 988718 - Mark nsSecurityHeaderParser explicit. r=dkeeler
2014-03-27 12:51:25 -04:00
Antonio M. Amaya
7ab64abd30
Bug 880043 - Signed packaged installation test certificate generation. r=cviecco
...
--HG--
rename : security/manager/ssl/tests/unit/test_signed_apps/nss_ctypes.py => security/manager/ssl/tests/unit/test_signed_apps/gentestfiles/nss_ctypes.py
rename : security/manager/ssl/tests/unit/test_signed_apps/sign_b2g_app.py => security/manager/ssl/tests/unit/test_signed_apps/gentestfiles/sign_b2g_app.py
2014-03-27 11:02:27 -04:00
David Keeler
f4de91f0a9
bug 986171 - mozilla::pkix: telemetry for what cert validation library is in use r=cviecco
2014-03-26 09:41:08 -07:00
David Keeler
e31dcef1a9
Backed out changeset d9e136a02980 (bug 986171) for build bustage r=backout
2014-03-25 14:02:42 -07:00
David Keeler
c10761fd5d
bug 986171 - mozilla::pkix: telemetry for what cert validation library is in use r=cviecco
2014-03-25 13:43:01 -07:00
David Keeler
e9201ee68f
bug 987217 - free leaking encodedRequest in GenerateCRMFRequest r=cviecco
2014-03-25 10:38:03 -07:00
Camilo Viecco
607c39fb67
Bug 969188 - Part 3/3 - Test handling of v1/v2/v3 certificates from PSM. r=keeler
...
--HG--
extra : rebase_source : 321d603913f07a0afe64400e300146873e8a81af
2014-02-25 15:37:22 -08:00
Camilo Viecco
9f33e0e4e5
Bug 969188 - Part 2/3 - mozilla::pkix only decode v3 extensions in v3 certificates. r=briansmith
...
--HG--
extra : rebase_source : 86e58ccf8538d0f40d3b24b89a92dceac095cb21
2014-03-06 10:04:04 -08:00
Camilo Viecco
2d58a01154
Bug 969188 - Part 1/3 - Fix mozilla::pkix handling of trusted v1 certificates. r=briansmith
...
--HG--
extra : rebase_source : 242b4849a7820d23518936a8c86ddcb7d9684394
2014-03-06 10:04:04 -08:00
Wan-Teh Chang
cdc0fd138a
Bug 986875: Don't set the obsolete NSS makefile variable STANDARDS_CFLAGS.
...
r=glandium.
2014-03-24 16:53:33 -07:00
David Keeler
4208771d44
bug 987262 - mozilla::pkix: refactor Nested AtEnd() checks in pkixder.h r=briansmith
2014-03-24 13:12:56 -07:00
Phil Ringnalda
27ed119188
Merge m-c to m-i
2014-03-22 08:09:46 -07:00
ffxbld
76021ccc8d
No bug, Automated HSTS preload list update from host bld-linux64-spot-008 - a=hsts-update
2014-03-22 03:20:45 -07:00
David Keeler
94f596638c
backout bug 985021 (8d622f4ec6e9) for another build breakage on a CLOSED TREE r=backout
2014-03-21 11:47:06 -07:00
David Keeler
950e25173a
bug 969758 - ignore "snionly" property in Google's HSTS preload list r=cviecco DONTBUILD because NPOTB
2014-03-21 14:09:04 -07:00
David Keeler
81f6c14f73
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
2014-03-21 10:38:36 -07:00
David Keeler
84882df999
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
2014-03-21 11:52:01 -07:00
David Keeler
c08f958136
backout bug 985021 (de535cd27ee7) for build breakage r=backout
2014-03-20 16:06:15 -07:00
David Keeler
d03bb6501c
bug 985021 - mozilla::pkix: temporarily accept pathLenConstraint in EE basic constraints extensions r=briansmith
2014-03-20 15:50:12 -07:00
David Keeler
41de3e33c3
bug 985201 - follow-up: fix comment mentioning "Insanity" (it should be "mozilla::pkix") r=me DONTBUILD
2014-03-20 15:36:23 -07:00
David Keeler
f8e657144b
bug 985201 - rename insanity::pkix to mozilla::pkix r=cviecco r=briansmith
...
--HG--
rename : security/insanity/include/insanity/ScopedPtr.h => security/pkix/include/pkix/ScopedPtr.h
rename : security/insanity/include/insanity/bind.h => security/pkix/include/pkix/bind.h
rename : security/insanity/include/insanity/nullptr.h => security/pkix/include/pkix/nullptr.h
rename : security/insanity/include/insanity/pkix.h => security/pkix/include/pkix/pkix.h
rename : security/insanity/include/insanity/pkixtypes.h => security/pkix/include/pkix/pkixtypes.h
rename : security/insanity/lib/pkixbind.cpp => security/pkix/lib/pkixbind.cpp
rename : security/insanity/lib/pkixbuild.cpp => security/pkix/lib/pkixbuild.cpp
rename : security/insanity/lib/pkixcheck.cpp => security/pkix/lib/pkixcheck.cpp
rename : security/insanity/lib/pkixcheck.h => security/pkix/lib/pkixcheck.h
rename : security/insanity/lib/pkixder.cpp => security/pkix/lib/pkixder.cpp
rename : security/insanity/lib/pkixder.h => security/pkix/lib/pkixder.h
rename : security/insanity/lib/pkixkey.cpp => security/pkix/lib/pkixkey.cpp
rename : security/insanity/lib/pkixocsp.cpp => security/pkix/lib/pkixocsp.cpp
rename : security/insanity/lib/pkixutil.h => security/pkix/lib/pkixutil.h
rename : security/insanity/moz.build => security/pkix/moz.build
rename : security/insanity/test/lib/moz.build => security/pkix/test/lib/moz.build
rename : security/insanity/test/lib/pkixtestutil.cpp => security/pkix/test/lib/pkixtestutil.cpp
rename : security/insanity/test/lib/pkixtestutil.h => security/pkix/test/lib/pkixtestutil.h
2014-03-20 14:29:21 -07:00
Jed Davis
a0cc886e03
Bug 985227 - Part 3: Replace the seccomp filter arch ifdefs with syscall existence tests. r=kang
2014-03-20 10:19:42 -04:00
Jed Davis
d43d0dfdd4
Bug 985227 - Part 2: Flatten out the #define maze in the seccomp filter. r=kang
2014-03-20 10:19:42 -04:00
Jed Davis
a66e7db1f0
Bug 985227 - Part 1: Move the seccomp filter into its own translation unit. r=kang
...
--HG--
rename : security/sandbox/linux/seccomp_filter.h => security/sandbox/linux/SandboxFilter.cpp
2014-03-20 10:19:42 -04:00
Jed Davis
5252d839d5
Bug 975273 - Add missing include to unbreak desktop seccomp build. r=kang
2014-03-20 09:27:28 -04:00
David Keeler
2ccf86f421
bug 984567 - insanity::pkix: handle/test malformed OCSP responses r=briansmith r=cviecco
2014-03-19 09:36:10 -07:00
Camilo Viecco
0f2a3b9cca
Bug 966820 - Add test for trustbits for Certverifier. r=dkeeler
...
--HG--
rename : layout/reftests/abs-pos/table-internal-5-ref.html => layout/reftests/abs-pos/table-internal-1-ref.html
rename : layout/reftests/abs-pos/table-internal-6-ref.html => layout/reftests/abs-pos/table-internal-3-ref.html
rename : layout/reftests/abs-pos/table-internal-7-ref.html => layout/reftests/abs-pos/table-internal-4-ref.html
extra : rebase_source : d854bd51bd84e9f7e21980a31c822726e4401dd9
2014-03-06 14:17:50 -08:00
Paolo Amadini
e7ed1c1bf4
Bug 984788 - Convert legacy uses of promise.js to Promise.jsm. rs=Yoric
2014-03-18 15:16:02 +01:00