[pkgsrc/trunk]: pkgsrc/devel/nss Update to 3.44

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/ca43df49fc33
branches:  trunk
changeset: 333910:ca43df49fc33
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Thu May 16 14:08:16 2019 +0000

description:
Update to 3.44

Changelog:
New Functions:

    in lib/certdb/cert.h
        CERT_GetCertificateDer - Access the DER-encoded form of a
CERTCertificate.

Notable Changes in NSS 3.44:

   * It is now possible to build NSS as a static library (Bug 1543545)
   * Initial support for building for iOS.

Bugs fixed in NSS 3.44:

   * 1501542 - Implement CheckARMSupport for Android
   * 1531244 - Use __builtin_bswap64 in crypto_primitives.h
   * 1533216 - CERT_DecodeCertPackage() crash with Netscape Certificate
Sequences
   * 1533616 - sdb_GetAttributeValueNoLock should make at most one sql query,
rather than one for each attribute
   * 1531236 - Provide accessor for CERTCertificate.derCert
   * 1536734 - lib/freebl/crypto_primitives.c assumes a big endian machine
   * 1532384 - In NSS test certificates, use @example.com (not @bogus.com)
   * 1538479 - Post-Handshake messages after async server authentication break
when using record layer separation
   * 1521578 - x25519 support in pk11pars.c
   * 1540205 - freebl build fails with -DNSS_DISABLE_CHACHAPOLY
   * 1532312 - post-handshake auth doesn't interoperate with OpenSSL
   * 1542741 - certutil -F crashes with segmentation fault
   * 1546925 - Allow preceding text in try comment
   * 1534468 - Expose ChaCha20 primitive
   * 1418944 - Quote CC/CXX variables passed to nspr
   * 1543545 - Allow to build NSS as a static library
   * 1487597 - Early data that arrives before the handshake completes can be
read afterwards
   * 1548398 - freebl_gtest not building on Linux/Mac
   * 1548722 - Fix some Coverity warnings
   * 1540652 - softoken/sdb.c: Logically dead code
   * 1549413 - Android log lib is not included in build
   * 1537927 - IPsec usage is too restrictive for existing deployments
   * 1549608 - Signature fails with dbm disabled
   * 1549848 - Allow building NSS for iOS using gyp
   * 1549847 - NSS's SQLite compilation warnings make the build fail on iOS
   * 1550041 - freebl not building on iOS simulator
   * 1542950 - MacOS cipher test timeouts

diffstat:

 devel/nss/Makefile                              |   5 +-
 devel/nss/distinfo                              |  11 ++--
 devel/nss/patches/patch-nss_lib_freebl_blinit.c |  58 -------------------------
 3 files changed, 7 insertions(+), 67 deletions(-)

diffs (102 lines):

diff -r 1745adc651da -r ca43df49fc33 devel/nss/Makefile
--- a/devel/nss/Makefile        Thu May 16 06:58:23 2019 +0000
+++ b/devel/nss/Makefile        Thu May 16 14:08:16 2019 +0000
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.165 2019/05/05 22:47:27 ryoon Exp $
+# $NetBSD: Makefile,v 1.166 2019/05/16 14:08:16 ryoon Exp $
 
 DISTNAME=              nss-${NSS_RELEASE:S/.0$//}
-NSS_RELEASE=           3.43.0
-PKGREVISION=           2
+NSS_RELEASE=           3.44.0
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_MOZILLA_ALL:=security/nss/releases/NSS_${NSS_DIST_DIR_VERSION:S/_0$//}_RTM/src/}
 
diff -r 1745adc651da -r ca43df49fc33 devel/nss/distinfo
--- a/devel/nss/distinfo        Thu May 16 06:58:23 2019 +0000
+++ b/devel/nss/distinfo        Thu May 16 14:08:16 2019 +0000
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.95 2019/05/05 22:47:27 ryoon Exp $
+$NetBSD: distinfo,v 1.96 2019/05/16 14:08:16 ryoon Exp $
 
-SHA1 (nss-3.43.tar.gz) = f7c6adc80aae41686e6238df8f0ac50d5388cf11
-RMD160 (nss-3.43.tar.gz) = f864e768542364b7fb2b7d727579f6ced82cf0a6
-SHA512 (nss-3.43.tar.gz) = e9dfba5bd6f68c5ab58fc7a6fa1b16a035be1b1b7c436cf787bdc99257c5f54c78d73d94d015bffd29420df19b2a2818166c68fe592dd7208ab5605344827fb5
-Size (nss-3.43.tar.gz) = 23466026 bytes
+SHA1 (nss-3.44.tar.gz) = 44a83b1bf4efd27605177ecdbf217e579ae8c8ae
+RMD160 (nss-3.44.tar.gz) = 7ab3ffca517592882636535d770ceac392cc1edf
+SHA512 (nss-3.44.tar.gz) = c4d7343a66f91c5888a121e266d1f1471da798a21d608a29caf598a828725e4bf9ea7411a105b23335f20bd7c12788dad567922ceeaebeb0c98fbf9bbe4006f7
+Size (nss-3.44.tar.gz) = 23474704 bytes
 SHA1 (patch-am) = fea682bf03bc8b645049f93ed58554ca45f47aca
 SHA1 (patch-an) = 4ab22f2a575676b5b640bc9a760b83eb05c75e69
 SHA1 (patch-md) = 8547c9414332c02221b96719dea1e09cb741f4d1
@@ -16,7 +16,6 @@
 SHA1 (patch-nss_cmd_platlibs.mk) = 01f4350de601b29c94e8a791a28daca226866bb6
 SHA1 (patch-nss_coreconf_OpenBSD.mk) = 1a4c3711d5d1f7f9e8d58b36145b15d7e444d754
 SHA1 (patch-nss_coreconf_command.mk) = 008f7670f164bf19555a7691f5a59fc8bf687078
-SHA1 (patch-nss_lib_freebl_blinit.c) = d3b3757541fe9b80ec9aee3159c20ca0aa88bcc4
 SHA1 (patch-nss_lib_freebl_md5.c) = 5cbec40695e296f0713895fb85cd37f6df76b85b
 SHA1 (patch-nss_lib_util_utilpars.c) = 5d3000515b01037929730a752b7d7a0f46f06deb
 SHA1 (patch-nss_tests_all.sh) = f8d0fcfcd67dca757c9ce016660210b20b1e6e8f
diff -r 1745adc651da -r ca43df49fc33 devel/nss/patches/patch-nss_lib_freebl_blinit.c
--- a/devel/nss/patches/patch-nss_lib_freebl_blinit.c   Thu May 16 06:58:23 2019 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,58 +0,0 @@
-$NetBSD: patch-nss_lib_freebl_blinit.c,v 1.3 2019/05/05 22:47:28 ryoon Exp $
-
-* Fix for arm/aarch64
-
---- nss/lib/freebl/blinit.c.orig       2018-04-09 15:38:16.000000000 +0000
-+++ nss/lib/freebl/blinit.c    2018-04-12 14:29:56.040326263 +0000
-@@ -92,7 +92,7 @@
- #endif /* NSS_X86_OR_X64 */
- 
- /* clang-format off */
--#if (defined(__aarch64__) || defined(__arm__)) && !defined(__ANDROID__)
-+#if (defined(__aarch64__) || defined(__arm__)) && defined(__linux__)
- #ifndef __has_include
- #define __has_include(x) 0
- #endif
-@@ -105,10 +105,10 @@
- #define AT_HWCAP2 0
- #define AT_HWCAP 0
- #endif /* defined(__GNUC__) && __GNUC__ >= 2 && defined(__ELF__)*/
--#endif /* (defined(__aarch64__) || defined(__arm__)) && !defined(__ANDROID__) */
-+#endif /* (defined(__aarch64__) || defined(__arm__)) && defined(__linux__) */
- /* clang-format on */
- 
--#if defined(__aarch64__) && !defined(__ANDROID__)
-+#if defined(__aarch64__) && defined(__linux__)
- // Defines from hwcap.h in Linux kernel - ARM64
- #ifndef HWCAP_AES
- #define HWCAP_AES (1 << 3)
-@@ -138,9 +138,9 @@
-     /* aarch64 must support NEON. */
-     arm_neon_support_ = disable_arm_neon == NULL;
- }
--#endif /* defined(__aarch64__) && !defined(__ANDROID__) */
-+#endif /* defined(__aarch64__) && defined(__linux__) */
- 
--#if defined(__arm__) && !defined(__ANDROID__)
-+#if defined(__arm__) && defined(__linux__)
- // Defines from hwcap.h in Linux kernel - ARM
- /*
-  * HWCAP flags - for elf_hwcap (in kernel) and AT_HWCAP
-@@ -179,7 +179,7 @@
-         arm_neon_support_ = hwcaps & HWCAP_NEON && disable_arm_neon == NULL;
-     }
- }
--#endif /* defined(__arm__) && !defined(__ANDROID__) */
-+#endif /* defined(__arm__) && defined(__linux__) */
- 
- // Enable when Firefox can use it.
- // #if defined(__ANDROID__) && (defined(__arm__) || defined(__aarch64__))
-@@ -262,7 +262,7 @@
- {
- #ifdef NSS_X86_OR_X64
-     CheckX86CPUSupport();
--#elif (defined(__aarch64__) || defined(__arm__)) && !defined(__ANDROID__)
-+#elif (defined(__aarch64__) || defined(__arm__)) && defined(__linux__)
-     CheckARMSupport();
- #endif
-     return PR_SUCCESS;