276 Commits

Author SHA1 Message Date
roytam1 7253c01726 import from custom branch of UXP: nss: update nssckbi to 2.72 (e26468c8) 2024-12-21 10:07:10 +08:00
roytam1 fc72ab9114 import from UXP: [NSS] Bug 1899402 - Correctly destroy bulkkey in error scenario. r=jschanck (e8252090) 2024-12-21 10:07:02 +08:00
roytam1 345ec9e16f ported from custom branch of UXP: [network] Update effective TLD names list from esr128. 2024-12-21 10:06:50 +08:00
roytam1 b857b089da nss: update nssckbi to 2.68 2024-06-09 07:15:04 +08:00
roytam1 9bd87243d3 import from UXP: Issue #1749 - Remove restriction of SVG width/height element attributes. (a94a86ff) 2024-06-09 07:11:52 +08:00
roytam1 9022d33dd5 [NSS] sync with https://github.com/roytam1/NSS/tree/NSS_3_48_UXP_BRANCH 2023-11-17 14:32:24 +08:00
roytam1 b1f3b6d3cc nss: update nssckbi to 2.64 2023-11-16 10:14:08 +08:00
roytam1 efdc5264a8 ported from mozilla:
- Bug 148624 - only show tooltip when document has focus. r=emilio (8ae372dc88d1)
- Bug 1857513 - Use window activeness rather than document.hasFocus() to display chrome-only tooltips. r=smaug (4cbf370b4e16)
2023-10-11 11:33:28 +08:00
roytam1 69f77fc6e3 import from UXP: Cherry-pick upstream libvpx fix (bb1974ce) 2023-09-29 10:21:03 +08:00
Vincent Rabaud 62590dd716 [libwebp] Never send VP8_STATUS_SUSPENDED back in non-incremental.
Add the incremental_ member to the internal VP8Decoder,
to mimic VP8LDecoder

Change-Id: I34842e473bb566f51c18fe42afda63e66c0185b6
2023-09-20 11:35:55 +08:00
Masahiro Hanada 53eda93e4a [libwebp] Fix next is invalid pointer when WebPSafeMalloc fails
When WebPSafeMalloc fails on VP8LHuffmanTablesAllocate,
next is not initialized to NULL.
VP8LHuffmanTablesDeallocate uses next to know the following nodes.
A patch fixes this issue.

Change-Id: I144ae84cd97e5bca227018ef1afa95361267902c
2023-09-20 11:35:47 +08:00
roytam1 ad4ba6ecd5 [libwebp] backport missing patch from https://github.com/webmproject/libwebp/commit/067031eaed11e91d9914e1e872738c7bdf075e0b 2023-09-17 07:50:45 +08:00
Vincent Rabaud 795ad6d526 [libwebp] Fix invalid incremental decoding check.
The first condition is only necessary if we have not read enough
(enough being defined by src_last, not src_end which is the end
of the image).
The second condition now fits the comment below: "if not
incremental, and we are past the end of buffer".

BUG=oss-fuzz:62136

Change-Id: I0700f67c62db8e1c02c2e429a069a71e606a5e4f
2023-09-12 22:18:16 +08:00
Vincent Rabaud 1d0aec2ee2 [libwebp] Fix OOB write in BuildHuffmanTable.
First, BuildHuffmanTable is called to check if the data is valid.
If it is and the table is not big enough, more memory is allocated.

This will make sure that valid (but unoptimized because of unbalanced
codes) streams are still decodable.

Bug: chromium:1479274
Change-Id: I31c36dbf3aa78d35ecf38706b50464fd3d375741
2023-09-12 22:17:59 +08:00
roytam1 71d781cb44 partly import changes from tenfourfox:
- update ESR base to 115; update EV roots, HSTS, pins, TLDs, TZs; update usrsctp; security pullup; more comprehensive nuisance script blocking; fixes for #488, #566 (55284dd80)
- build fixes for usrsctp (09a64c8b5)
2023-09-01 11:12:41 +08:00
roytam1 d7099fa2e8 Revert "HACK: abort from further processing JSOP_SUPERBASE if allowSuperProperty() is false, fix accessing apple.com."
This reverts commit ff899a755e.
2023-09-01 08:02:23 +08:00
roytam1 b6f52f51cf tremor: update to https://github.com/sezero/tremor/tree/91decb5f1b11a84a2157a6326d9135b22627024b
since upstream(i.e. xiph) doesn't update it since 2018.

locally added NOMINMAX guard as well.
2023-08-27 23:18:03 +08:00
roytam1 62bf0ea1ae dom/media: add S16 support code to audio decoders 2023-08-26 07:57:27 +08:00
roytam1 19881b06d6 ported from custom branch of UXP:
- add configure option '--enable-int-audio-sample' for speed and audio driver compatibility, and fixups in exports and webrtc. (ef5e4f06)
- cubeb: disable wasapi backend when '--enable-int-audio-sample' is specified, since it can handle float32 sample only in our current cubeb library. (0f1c046a)
2023-08-26 00:45:03 +08:00
roytam1 61b754e63f ported from UXP:
- Issue #61 - Reinstate buildability with shared gkmedias dll (371d7cf05d)
- Issue #61 - Add configure option for non-windows platforms (924bf92e4b)
- Issue #61 - Add missing external symbol cubeb_set_log_callback to gkmedias symbols.def (c85f28b0c0)
- Issue #61 - Add missing external symbols for gkmedias when WebRTC is built (6b510a74e7)
- Issue #61 - Follow-up: Fix gkmedias.dll link bustage related to Skia. (6e2f70a70f)
- Issue #61 - Follow-up: Fix xul.dll link bustage related to Skia. (4584069f26)
2023-08-26 00:00:53 +08:00
roytam1 002c864a11 js: header fixes for bring back `--enable-shared-js' configure option 2023-08-25 23:18:08 +08:00
roytam1 888612fd3d ported from custom branch of UXP: speex-resampler: update to git head (i.e. rev 738e179), also update patch files, update.sh, simd_detect.* and remove obsolete patches and headers. (df798cf6)
also changed `static inline' to `static' for vc2013 compatibility.
2023-08-25 17:35:57 +08:00
roytam1 ff899a755e HACK: abort from further processing JSOP_SUPERBASE if allowSuperProperty() is false, fix accessing apple.com. 2023-08-25 17:22:49 +08:00
roytam1 dc6223e046 nss: update nssckbi to 2.62 2023-08-25 17:22:49 +08:00
roytam1 9405117141 packaging: remove TestInterfaceJS* from component packaging. 2023-08-25 17:22:49 +08:00
roytam1 50d2e2b43c import changes from tenfourfox:
- #651: M1779993 + backbugs (9197c1505)
- #651: M1786188 M1791029 (28b4c0882)
- #651: M1761233 M1687303 M1633019 M1797336 M1799748 M1801102 (fb91afbb4)
- add MDN script to problematic scripts due to screen blanking after load (2488fabc4)
- #659: initial support for per-host CSS grid whitelist (c889bc5ce)
- #659 sidecar: better blocking means for developer.mozilla.org (c51a503ed)
- #659: tuneups and edgecases (17b23692f)
2023-04-21 10:33:34 +08:00
roytam1 9f9aa2efc7 [network][security] add TLS_RSA_WITH_AES_256_GCM_SHA384 and TLS_RSA_WITH_AES_128_GCM_SHA256 support 2023-01-07 08:02:24 +08:00
roytam1 b637891ad4 NSS: reorder ciphers for better performance 2022-12-10 07:43:26 +08:00
roytam1 b5eddeaa2f zlib: also pick up https://github.com/madler/zlib/commit/4346a16853e19b45787ce933666026903fb8f3f8 2022-12-10 07:42:25 +08:00
roytam1 caf04940e1 imported changes from mozilla NSS:
- Bug 1794495 - Remove Network Solutions Certificate Authority. r=KathleenWilson (64a28c8d60)
- Bug 1794507 - Remove SwissSign Platinum CA - G2 from NSS. r=KathleenWilson (f2c2308403)
- Bug 1797559 - Remove EC-ACC root cert from NSS. r=KathleenWilson (4f1985c8dd)
- Bug 1799038 - Remove Staat der Nederlanden EV Root CA from NSS. r=KathleenWilson (9151be4c45)
- Bug 1794506 - Set nssckbi version number to 2.60. r=nss-reviewers,bbeurdouche (39fc42e136)
- Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates. r=KathleenWilson (a871902c05)
2022-12-07 13:01:35 +08:00
roytam1 48abe4e331 import from custom branch of UXP: D3D9 initialization fix by XPRTM@MSFN, Thanks! (a16549dd) 2022-10-06 20:55:45 +08:00
roytam1 8a9c7cc76f revert small part of bug1767365 part from rev c28b308e as it it breaks overlay in https://www.ventusky.com/?w=off 2022-09-25 07:11:35 +08:00
roytam1 cf157e5f85 backout bug1757604 part from rev c28b308e as it cause display issues 2022-09-21 22:38:00 +08:00
roytam1 54d374ceb2 d3d9: further lowered MaxTexture limit to 1024 to give chance for Radeon 9550 and GMA 965 to use hardware acceleration 2022-09-20 14:59:07 +08:00
roytam1 c28b308ecb partly import changes from tenfourfox:
- #651: M1767365+backbugs M1757604 M1497246 M1771774 M1776658 M1761981 M1773717 (bc6daa0ae)
2022-09-19 14:59:37 +08:00
roytam1 32adeaa21d partly import changes from tenfourfox:
- 102ESR: rev EV roots, TLS roots, TLDs, tzdata, HSTS, pins (c47bef11f)
2022-09-19 14:16:35 +08:00
roytam1 a6e45483ec update NSS builtin certstore to Sep 2022 version from mozilla upstream. 2022-09-19 14:14:34 +08:00
roytam1 10489da23d partly import changes from tenfourfox:
- fix floats in bailouts from POWER9 JIT project (branching adjust under separate investigation) (6cae6ac23)
- better solution for #654 (0a9d355be)
- #566 and #651: M1761026+backbugs, M1663508, M1719215 (700da3e99)
- #651: update HSTS, pins, TLDs, TZ data (fbd13e3c8)
2022-05-06 12:09:36 +08:00
roytam1 26d53d99ec nss: in-tree zlib CVE-2018-25032 fix, from https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 2022-04-01 23:49:51 +08:00
roytam1 7a0284a6eb nss: update in-tree zlib to 1.2.11 2022-04-01 23:47:58 +08:00
roytam1 6c0e009c89 zlib: CVE-2018-25032 fix, from https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531 2022-04-01 23:32:54 +08:00
roytam1 9e05fb0f04 [NSS] ported mozilla upstream changes:
- Bug 1552254 internal_error alert on Certificate Request with sha1+ecdsa in TLS 1.3 (be6a9782)
- Bug 1753535 - Remove obsolete stateEnd check in SEC_ASN1DecoderUpdate. r=rrelyea (800111fa)
- Bug 1756271 - Remove token member from NSSSlot struct. r=rrelyea (55052f78)
- Bug 1396616 - Update nssUTF8_Length to RFC 3629 and fix buffer overrun. r=nss-reviewers,jschanck (2f2c8564)
- Bug 1755264 - TLS 1.3 Illegal legacy_version handling/alerts. r=djackson (7d931c59)
- Bug 1751305 - Remove expired explicitly distrusted certificates from certdata.txt. r=KathleenWilson (b722e523)
- Bug 1751298 - Add Telia Root CA v2 root certificate. r=KathleenWilson (1fcbbd7e)
- Bug 1754890 - Add two D-TRUST 2020 root certificates. r=KathleenWilson (f63fb86d)
2022-03-25 23:47:43 +08:00
roytam1 1bfb3a970c import from UXP:
- Issue #3039 - Add closure point to bounds calculation. (42fc0af32)
- Issue #3039 - Increase the MAX_FONT_SIZE limit applied in cairo_ft_font to match the gfxFont size limit. (35164e286)
- Issue #3039 - Reapply bug 624198 fix that got lost in an upstream update. (dda2b7972)
- Issue #3039 - Don't try to pass a dash array of > 16 elements to ExtCreatePen. (3bb1c962e)
2022-03-24 23:31:25 +08:00
roytam1 9a9f885584 update libpixman from my UXP custom branch, with SSSE3 code compiled (without CONFIG['SSSE3_FLAGS'] support, so hackfixed) 2022-03-24 23:31:06 +08:00
roytam1 8122fb2c65 update Twemoji to v14.0.1 based font. 2022-03-23 13:57:01 +08:00
roytam1 ab2c4b048d imported changes from mozilla:
- Bug 1754724 - Clear up some computations in expat code. r=farre, a=tritter (c084e1e9)
- Bug 1754724 - Clear up some more computations in expat code. r=farre, a=tritter (1ff49f5a)
- Bug 1754724 - Clear up even more computations in expat code. r=farre, a=tritter (4a180bbf)
- Bug 1758062 - Convert parameters upfront. r=smaug, a=tritter (153b3922)
2022-03-08 09:59:30 +08:00
roytam1 9ca79da1ef imported changes from mozilla NSS:
- Bug 1755555 - Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots. r=rrelyea (a36477f0)
- Bug 1370866 - Check return value of PK11Slot_GetNSSToken. r=djackson (d7e8c2df)
- Bug 1751157 - Throw illegal_parameter alert for illegal extensions in handshake message. r=djackson (8fd5ca0c)
2022-02-25 12:29:13 +08:00
roytam1 b554fc9027 partly import changes from tenfourfox:
- #654: M1746720 M1737816 M1746011 M1739957 M1740985+backbugs M1742421, update HSTS, TLDs (861ae8f62)
- #654: lozad and yt workarounds (5e969c18d)
2022-02-25 11:31:59 +08:00
roytam1 f6e4a6062e partly import changes from tenfourfox:
- M1739352 M1732572(partial) M1730120 M1738237 M1737009 M1717318(partial) M1586061 (03ffdeadb)
- M1737515 M1737470(no tests) +TLDs, HSTS, tzdata (fd2b82f13)
2022-01-04 12:23:30 +08:00
roytam1 a97a34c69b imported changes from mozilla NSS:
- Bug 1737470 - Ensure DER encoded signatures are within size limits. r=jschanck,mt,bbeurdouche,rrelyea
- Bug 1735028 - check for missing signedData field r=keeler
and bump patch version.
2021-12-27 10:43:52 +08:00