602a2e35d8
[gfx] Explicitly cast calculation to int32.
2026-04-27 10:35:45 +08:00
99c241d56f
[gfx] Port libyuv upstream bounds check.
2026-04-27 10:35:10 +08:00
d419d35337
Bug 2025973 - Use value-semantics for txExecutionState::TemplateRule
...
TemplateRule is a wrapper around references mostly and can for the
purposes of this function be copied to the stack, given that
TemplateRule::mModeNsId is not mutated there.
2026-04-27 10:34:42 +08:00
e4fd587adf
[NSS] Clarify extension negotiation mechanism for TLS Handshakes.
2026-04-27 10:22:53 +08:00
bcd936e548
[js] Only allow strings as function name.
2026-04-27 10:11:27 +08:00
58f5dd61ae
Issue #3030 - Reduce layout stalls due to compositor hang-ups.
2026-04-27 10:10:51 +08:00
096dffbcab
Bug 2025370 - Properly handle error case in EventListenerManager::GetTypedEventHandler
2026-04-27 10:10:25 +08:00
853057cf33
[DOM/XSLT] Don't use txXPathNode by reference.
...
Follow-up to previous XSLT fixes.
2026-04-27 10:09:58 +08:00
4139582955
[gfx] Stop using binary arithmetic in software filtering.
...
There was some weird binary arithmetic to artificially clamp values in
calculations for dot products. (multiply by (x >= 0)...)
Switch to `std::clamp()` on the initial value instead.
2026-04-27 10:09:26 +08:00
be70077b66
Bug 2025332 - ErrorResult should call ClearUnionData more.
2026-04-27 10:08:54 +08:00
6cf972e912
Bug 2025483 update mBeginProcessing even on speex_resampler_set_rate() error
2026-04-27 10:08:29 +08:00
5f41bdffd4
[NSS] Deep copy profile data in CERT_FindSMimeProfile.
2026-04-27 10:08:04 +08:00
a0587881d6
[DOM/XSLT] Prevent circular indexing
...
Added additional flag to txIndexedKeyHashEntry to signal whether or not
this entry is already in the process of indexing.
The XSL specs 3.0 talk about recursion being fine, but circularity not
being ok, which is the case when a key is already being looked up.
2026-04-27 10:07:34 +08:00
c087ec3c00
No issue - Deduplicate HTMLAllCollection::GetSupportedNames code.
...
This was duplicated with a minor difference from the code present in
nsContentList::GetSupportedNames.
2026-04-27 10:06:51 +08:00
9dd4cfcc64
[NSS] Reject excessively large ASN.1 SEQUENCE OF in quickder.
2026-04-27 10:06:18 +08:00
bee96124c5
[DOM] Avoid leaks in nsXMLPrettyPrinter.
2026-04-27 10:05:51 +08:00
59887ccee8
[DOM/WebCrypto] Reject absurdly large salt values.
2026-04-27 10:05:04 +08:00
d8b8649f92
[DOM] Add a death grip and use locals in BaseMediaResource::ModifyLoadFlags.
2026-04-27 10:04:31 +08:00
470d5bd180
[DOM] Add a SequenceRooter to ConsoleProfile.
2026-04-27 10:03:46 +08:00
8c3c8b4e91
[widget] Improve clearing of data during clipboard operations.
2026-04-27 10:03:06 +08:00
efbe3cb909
Bug 2026293: Block scripts when initiating async scrollbar activity.
2026-04-27 10:02:29 +08:00
b2dc9706ca
[accessibility] Hold a strong ref to mParent in AccIterator.
2026-04-27 10:01:59 +08:00
483bf0f43a
[gfx] Don't return dummy surfaces.
2026-04-27 10:01:29 +08:00
8a4c6d11e0
[webrtc] Fix off-by-one comparison.
2026-04-27 10:00:49 +08:00
368694e27a
Bug 2025971 - Use txSingleNodeContext getter of owned txXPathNode.
...
eContext gets a copy of aNode. The function should use that one's member
as it's not a shared reference, which we can't know the life time of.
2026-04-27 10:00:15 +08:00
0bf878118a
[DOM/XSLT] Re-fetch index entry.
2026-04-27 09:59:36 +08:00
f568fa4576
Bug 2025976 - Make txxPathNode be a value instead of reference.
...
txxPathNode has value semantics (it's a smart pointer + uint32_t index;
two different objects of this instance with the same contents are the same
thing).
Increase correctness by making a copy instead of a reference.
2026-04-27 09:58:49 +08:00
d6ff046d72
[NSS] Improve input validation in DSAU signature decoding
2026-04-27 09:58:13 +08:00
1a73ec0124
[image] Hold a strong ref on error.
2026-04-27 09:57:40 +08:00
0ca2e3ea42
[DOM] Ensure the GC sees consistent states while adopting DOM nodes.
...
This should prevent some intermittent CC crashes when the wrapper cache
has an incorrect state.
2026-04-27 09:57:09 +08:00
a126257d80
[DOM] Improve CC/WrapperCache for nursery objects.
2026-04-27 09:56:28 +08:00
b6dec9b37c
[network] Ensure UDPSocket remains alive during CloseWithReason.
2026-04-24 09:23:16 +08:00
68fd6722f0
[network] Hold strong ref in nsSyncStreamListener::Available.
2026-04-24 09:22:45 +08:00
b55a39ac33
[network] Force NUL termination in ToStringBuffer AF_LOCAL.
...
Also reject AF_LOCAL in IPC reader (just in case).
2026-04-24 09:22:09 +08:00
b73e47ce1c
[webrtc] Hold a self-ref on behalf of sigslot, just in case.
...
Also, stop using these PC_AUTO_ENTER_API_CALL... macros
in functions that aren't actually JS API.
2026-04-24 09:21:23 +08:00
2f1af7557f
[DOM] Fix access to shared RuntimeService::mNavigatorProperties.
2026-04-24 09:20:45 +08:00
fe8d56078e
Issue #3060 - Align cookie magic prefix handling with the updated spec.
...
This adds `__Http-` and `__Host-Http-` magic prefixes, and aligns
our checks with RFC6265bis.
Resolves #3060
2026-04-24 09:20:06 +08:00
8d189c4890
[network] Handle WebSocketChannel::IsPersistentFramePtr correctly.
2026-04-24 09:19:42 +08:00
cecf760aa5
[network] Hold strong ref in nsDownloader::OnDataAvailable.
2026-04-24 09:19:02 +08:00
9e00ce775a
[DOM] Add a death grip.
2026-04-24 09:18:27 +08:00
269b0cdb58
[network] Use locals for VisitHeader
2026-04-24 09:17:56 +08:00
4d91f637b6
[DOM] Update some DOM canvas checks.
2026-04-24 09:16:58 +08:00
6048fc0fb7
Issue #3058 - Part 1: Fix arithmetic issue in ConvertYCbCrToRGB32
...
The more complex part can be landed later.
2026-04-24 09:16:01 +08:00
69fdabab8d
[NSS] Fix memory leak in NSC_GenerateKey error path.
2026-04-24 09:13:44 +08:00
29233ebca8
[NSS] Protect rwSessionCount with slotLock.
...
Previously, SFTKSlot.rwSessionCount was incremented and decremented
atomically, which meant that there was no way to synchronize reads from it
in NSC_GetTokenInfo. This patch removes the atomic operations but protects
rwSessionCount with SFTKSlot.slotLock.
SFTKSlot.sessionCount is already protected in this way, so this should
have no performance impact.
2026-04-24 09:07:08 +08:00
700b73f155
[media] Check alpha data pointer instead of length.
...
`nestegg_packet_additional_data()` can return a non-zero length with a
null-pointer after failure to parse an ID_BLOCK_ADDITIONAL element.
See upstream bug https://github.com/mozilla/nestegg/issues/76
2026-04-24 09:00:53 +08:00
2ece521467
[network] use nsCOMPtr for mRequest in Base Channel's ScopedRequestSuspender
2026-04-24 09:00:06 +08:00
8ffe5094c9
Issue #2946 - Follow-up: Sanity-check WMF video properties.
...
Not sure where else to put this under, but it's a WMF HWA related check,
so filing it as a follow-up here to recent work.
Also tag #2949
2026-04-23 09:06:00 +08:00
7aaf0ab764
[DOM] More consistently use already-calculated image properties.
2026-04-23 09:05:23 +08:00
4d73188003
[XPCOM] Update list of executable extensions on Windows.
2026-04-23 09:03:31 +08:00
Moonchild
Simon Farre
Dennis Jackson
ownedbywuigi
Olli Pettay
Tom Schuster
Karl Tomlinson
Daniel Holbert