Vicamo Yang
3bcd1c9eb8
Bug 944625 - B2G Emulator-x86: fix undeclared __NR_sendto, __NR_recvfrom. r=jld,kang
2014-03-13 13:44:43 +09:00
Wes Kocher
7a3239038d
Merge m-c to b-i
2014-03-12 21:22:36 -07:00
Jed Davis
f8d175ce14
Bug 977859 - Drop uid 0 in all content processes immediately after fork. r=bent r=kang
...
Now all regular child processes, including preallocated, are deprivileged.
Only Nuwa needs uid 0, because each of its children has a different uid/gid.
2014-03-12 15:48:15 -07:00
David Keeler
8fc5d6daee
bug 915932 - cache OCSP responses when using insanity::pkix r=cviecco r=briansmith
2014-03-12 13:08:48 -07:00
David Keeler
341b865887
bug 982403 - separate the compilation of certverifier and insanity::pkix r=cviecco r=briansmith
...
--HG--
rename : security/certverifier/moz.build => security/insanity/moz.build
2014-03-12 13:08:18 -07:00
Camilo Viecco
dcc3cb858e
Bug 962740 - Batch of 3 CA Certs to be granted EV capabilites. r=keeler
2014-02-26 14:41:02 -08:00
David Keeler
6d6c54d69b
Bug 974715 - Create more flexible OCSP response generation code. r=briansmith, r=cviecco
2014-03-10 14:04:31 -07:00
Brian Smith
ec6bc705e3
Bug 947584: Use official IANA names for cipher suites in PSM, r=cviecco
...
--HG--
extra : rebase_source : fafec912dc96480cb4f00bddec00d40e5e9db088
2014-03-09 20:21:12 -07:00
Brian Smith
f0cdb24e70
Bug 967153: Update to NSS 3.16 beta 5 (NSS_3_16_BETA5), r=me
...
--HG--
extra : rebase_source : 8dfdcd121214b084acc01025a2cd989ccf6a603c
2014-03-09 19:40:25 -07:00
ffxbld
0992075bf2
No bug, Automated HSTS preload list update from host bld-linux64-spot-041 - a=hsts-update
2014-03-08 04:29:12 -08:00
Landry Breuil
86a2cb9b9c
Bug 980848: use c-style comments in c files r=cviecco DONTBUILD
2014-03-07 18:32:11 +01:00
Jed Davis
685530a9a5
Bug 979686 - Fix the non-(ARM|x86|x86_64) desktop build. r=kang
2014-03-06 12:23:06 -08:00
Luke Wagner
b2189937c6
Bug 980180 - remove principals as an argument to compilation, part 2 (r=terrence)
...
--HG--
extra : rebase_source : 86791b50b4293ba5506f1e0f5c64730338f552e6
2014-03-06 16:28:07 -06:00
Vaibhav Agarwal
417b7f2e77
Bug 970925 - convert testing/mochitest/android.json into skip-if statements in mochitest.ini files; r=jmaher
2014-03-06 13:42:47 -05:00
Brian R. Bondy
6be742312e
Bug 941110 - Make the Windows sandbox code compile without the Win8 SDK. r=jimm
2014-03-06 12:53:24 -05:00
Ted Mielczarek
5db86de6a8
Bug 977699 - Move the few remaining mochitests to manifests. r=jmaher
2014-03-04 15:54:31 -05:00
Jed Davis
cfaafc654d
Bug 946407 - Disable sandbox when DMDing. r=njn r=kang
...
See also bug 956961.
2014-03-04 18:27:14 -08:00
Ehsan Akhgari
bf09c6f469
Bug 976896 - Port STL_FLAGS to moz.build; r=mshal
2014-03-04 19:39:06 -05:00
David Keeler
06559f1667
bug 978797 - stop classifying SEC_ERROR_INADEQUATE_KEY_USAGE as a "bad cert" error r=briansmith
2014-03-03 15:39:07 -08:00
Brian Smith
a55d0cfe09
Bug 967153: Update to NSS 3.16 beta 4 (NSS 3_16_BETA4), r=me
...
--HG--
extra : rebase_source : 192fdf657daa1aae51d9f163b074b8eb6a7aac13
2014-03-02 17:30:39 -08:00
Brian Smith
4b8d4318a5
Bug 978117: Enable test_signed_apps.js and test_signed_apps-marketplace.js on Android and B2G, r=cviecco
...
--HG--
extra : rebase_source : acc33b667f19583d94d300d4e4a73cb3e225bbd6
2014-03-01 20:55:57 -08:00
Brian Smith
2f3b70ffb5
Bug 978528: Return the correct error message when no potential issuers are found during path bulding in insanitY::pkix, r=cviecco
...
--HG--
extra : rebase_source : 71f806312ad322bc2971e7efaea2da217b07efad
2014-03-01 20:55:51 -08:00
Brian Smith
185ce0c8d9
Bug 978120: Enable more PSM xpcshell tests on Android and B2G, r=keeler
...
--HG--
extra : rebase_source : 439914322f2b2f2ebd7bf529e3a4a59f36831a7e
2014-03-01 19:02:58 -08:00
Brian Smith
f91269e634
Bug 978120: Make nsIX509Cert.setCerttrust, and nsIX509CertDB.addCert, and nsIX509CertDB2.addCertFromBase64 work on Android and B2G, r=keeler
...
--HG--
extra : rebase_source : 5582716fe0c650366e3cf5e85a30748a7d22b156
2014-03-01 19:01:23 -08:00
Ed Morley
1169e3e5fb
Merge latest green inbound changeset and mozilla-central
2014-03-03 14:44:44 +00:00
ffxbld
204086414a
No bug, Automated HSTS preload list update from host bld-linux64-spot-483 - a=hsts-update
2014-03-01 03:17:30 -08:00
Ryan VanderMeulen
b00f0ba8d9
Merge m-c to inbound.
2014-02-28 10:15:57 -05:00
Carsten "Tomcat" Book
a927d781fe
merge b2g-inbound to mozilla-central
2014-02-28 14:42:11 +01:00
Wes Kocher
e4299dd8a6
Merge m-c to b2g-inbound
2014-02-27 17:47:32 -08:00
Jed Davis
b8c81fc6e2
Bug 970676 - Turn on sandboxing on all relevant threads. r=dhylands r=bent f=kang
2014-02-27 13:18:01 -08:00
Brian Smith
ca2ea62abf
Bug 978111, Bug 978426: Disable test_sts_preloadlist_perwindowpb.js on B2G/ARM, a=bustage
...
--HG--
extra : rebase_source : 434af7dc53cf57eca1335a6e0ad0a4785c547e72
2014-02-28 21:12:07 -08:00
Brian Smith
4637429114
Bug 978185: Improve error codes returned from nsIX509CertDB.addCert and nsIX50CertDB.setCertTrust, r=keeler
...
--HG--
extra : rebase_source : e32a913f085524d113b17d03917c10ad92c7f6e1
2014-02-28 11:19:38 -08:00
Brian Smith
a5d253392f
Bug 978111: Enable already-working PSM xpcshell tests on Android and B2G, r=cviecco
...
--HG--
extra : rebase_source : c14ef67870f2b40a3319e6bc8df0ddfe9dd222e3
2014-02-28 11:16:16 -08:00
Ehsan Akhgari
87db9c0f0f
Bug 976898 - Move the sdkdecls.h force-include out of the build system; r=bbondy,glandium
2014-02-28 08:17:22 -05:00
Brian Smith
38efbc9d37
Bug 967153: Update to NSS 3.16 beta 3 (NSS_3_16_BETA3), r=me
...
--HG--
extra : rebase_source : 75c78b361f887c2cb820bc41913bcf68de15f83f
extra : histedit_source : 7c8e8a79c9dde7c702ceb5ce1e4a73f2a77fbea5
2014-02-27 16:06:22 -08:00
Andrew McCreight
537eb6fa81
Bug 962608 - Make PL_DHashTableInit infallible by default. r=briansmith,bsmedberg,ehsan,froydnj,jduell,jfkthame,roc,smaug
2014-02-27 10:04:09 -08:00
Brian Smith
c13108b590
Bug 921885: Use insanity::pkix for EV cert verification when insanity::pkix is the selected implementation, r=cviecco, r=keeler
...
--HG--
extra : rebase_source : b1fd1f8eace675484b3c2d568e5e74f767f1d2ad
2014-02-23 22:15:53 -08:00
Brian Smith
64ea6aa0a3
Bug 921886: Add certificate policiy support to insanity::pkix, r=keeler, r=cviecco
...
--HG--
extra : rebase_source : 6522e2c2f57f59fe23c0ed0c838f1f54236bdafc
2014-02-24 12:37:45 -08:00
Brian Smith
29c8950e17
Bug 970810: Expand name constraint tests to test insanity::pkix, r=cviecco
...
--HG--
extra : rebase_source : b8190690743a12623c7524429215fc7d8a8dea49
extra : histedit_source : fd9877f98303dd237b302e6c606ca11f4c36fd7c
2014-02-25 01:15:52 -08:00
Camilo Viecco
2e520f51df
Bug 900727: Add name constraints to psm in xpcshell. r=bsmith
2013-12-12 10:28:06 -08:00
Brian Smith
db4827dbd4
Bug 975122: Allow cert error overrides when insanity::pkix is used, r?cviecco, r?keeler
...
--HG--
extra : rebase_source : 47f5e779a16c462e40baa2d9cec2e83946c9076c
2014-02-22 19:08:06 -08:00
Raymond Etornam Agbeame(:retornam)
6d832f03cf
Bug 970614 - Remove code wrapped in #if 0 ... #endif blocks in PSM. r=keeler
2014-02-24 09:41:55 -05:00
Jed Davis
1467d9b632
Bug 971128 - Add sched_yield to seccomp whitelist. r=kang
2014-02-22 18:58:59 -08:00
Jed Davis
3027739852
Bug 970562 - Add sched_getscheduler to seccomp whitelist. r=kang
2014-02-22 18:58:59 -08:00
Ehsan Akhgari
0f5851acbd
Bug 935778 - Part 0.3: Spray some more MOZ_DECLARE_REFCOUNTED_TYPENAME across the tree
2014-02-20 23:07:24 -05:00
David Keeler
27afebfba2
bug 969479 - only prevent TLS fallback for STARTTLS r=briansmith
2014-02-20 15:14:32 -08:00
Brian R. Bondy
7563d524e8
Bug 974979 - Browser crashes after trying to restart a crashed e10s process. r=aklotz
2014-02-20 12:58:04 -05:00
Brian R. Bondy
842125950f
Bug 928061 - Enable separate Desktop in Windows sandbox policy. r=aklotz
2014-02-20 12:37:22 -05:00
Jed Davis
6549f56f18
Bug 974230 - Adjust sandbox so that socket() simply fails. r=kang
...
This is a workaround for issues with the SCTP code (bug 969715) and
NSPR's IPv6 support (bug 936320).
2014-02-20 09:35:44 -05:00
Jed Davis
bd5a8731fc
Bug 966547 - Switch sipcc from named to anonymous sockets on Unix. r=jesup, r=kang
2014-02-20 09:35:26 -05:00