pkgsrc-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[pkgsrc/trunk]: pkgsrc/www/firefox firefox: Update to 96.0.1



details:   https://anonhg.NetBSD.org/pkgsrc/rev/e9525a88b56d
branches:  trunk
changeset: 371850:e9525a88b56d
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Sat Jan 15 15:57:37 2022 +0000

description:
firefox: Update to 96.0.1

Changelog:
Version 96.0.1, first offered to Release channel users on January 14, 2022
Fixed

  * Addresses proxy rule exceptions not working on Windows systems when "Use
    system proxy settings" is set (bug 1749501)

  * Improvements to make the parsing of content-length headers more robust (bug
    1749957)


Version 96.0, first offered to Release channel users on January 11, 2022
New

  * We've made significant improvements in noise-suppression and
    auto-gain-control as well as slight improvements in echo-cancellation to
    provide you with a better overall experience.

  * We've also significantly reduced main-thread load.

  * Firefox will now default all cookies to having a SameSite=lax attribute
    which helps defend against Cross-Site Request Forgery (CSRF) attacks.

  * When printing, you can now choose to print only the odd/even pages.

Fixed

  * On macOS, command-clicking links in Gmail now opens them in a new tab as
    expected.

  * Our newest release fixes an issue where video intermittently drops SSRC.

  * It also fixes an issue where WebRTC downgrades screen sharing resolution to
    provide you with a clearer browsing experience.

  * Plus, we've fixed video quality degradation issues on certain sites.

  * Detached video in fullscreen on macOS has been temporarily disabled to
    avoid some issues with corruption, brightness changes, missing subtitles
    and high cpu usage.

  * Various security fixes

Security fixes:
#CVE-2022-22746: Calling into reportValidity could have lead to fullscreen
 window spoof
#CVE-2022-22743: Browser window spoof using fullscreen mode
#CVE-2022-22742: Out-of-bounds memory access when inserting text in edit mode
#CVE-2022-22741: Browser window spoof using fullscreen mode
#CVE-2022-22740: Use-after-free of ChannelEventQueue::mOwner
#CVE-2022-22738: Heap-buffer-overflow in blendGaussianBlur
#CVE-2022-22737: Race condition when playing audio files
#CVE-2021-4140: Iframe sandbox bypass with XSLT
#CVE-2022-22750: IPC passing of resource handles could have lead to sandbox
 bypass
#CVE-2022-22749: Lack of URL restrictions when scanning QR codes
#CVE-2022-22748: Spoofed origin on external protocol launch dialog
#CVE-2022-22745: Leaking cross-origin URLs through securitypolicyviolation
 event
#CVE-2022-22744: The 'Copy as curl' feature in DevTools did not fully escape
 website-controlled data, potentially leading to command injection
#CVE-2022-22747: Crash when handling empty pkcs7 sequence
#CVE-2022-22736: Potential local privilege escalation when loading modules from
 the install directory.
#CVE-2022-22739: Missing throttling on external protocol launch dialog
#CVE-2022-22751: Memory safety bugs fixed in Firefox 96 and Firefox ESR 91.5
#CVE-2022-22752: Memory safety bugs fixed in Firefox 96

diffstat:

 www/firefox/Makefile                                                                                                          |       7 +-
 www/firefox/distinfo                                                                                                          |      16 +-
 www/firefox/mozilla-common.mk                                                                                                 |       6 +-
 www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp                                                                  |       6 +-
 www/firefox/patches/patch-layout_style_extra-bindgen-flags.in                                                                 |      10 -
 www/firefox/patches/patch-libwebrtc.diff                                                                                      |  282750 ++++++++++
 www/firefox/patches/patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_device__info__linux.cc                       |       6 +-
 www/firefox/patches/patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc                              |      16 +
 www/firefox/patches/patch-third__party_libwebrtc_webrtc_modules_audio__processing_echo__detector_mean__variance__estimator.cc |      15 -
 9 files changed, 282788 insertions(+), 44 deletions(-)

diffs (truncated from 282929 to 300 lines):

diff -r 38f57c865758 -r e9525a88b56d www/firefox/Makefile
--- a/www/firefox/Makefile      Sat Jan 15 15:51:29 2022 +0000
+++ b/www/firefox/Makefile      Sat Jan 15 15:57:37 2022 +0000
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.507 2021/12/22 16:17:00 ryoon Exp $
+# $NetBSD: Makefile,v 1.508 2022/01/15 15:57:37 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            95.0.1
-MOZ_BRANCH_MINOR=      
+MOZ_BRANCH=            96.0
+MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
diff -r 38f57c865758 -r e9525a88b56d www/firefox/distinfo
--- a/www/firefox/distinfo      Sat Jan 15 15:51:29 2022 +0000
+++ b/www/firefox/distinfo      Sat Jan 15 15:57:37 2022 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.456 2021/12/19 15:09:49 ryoon Exp $
+$NetBSD: distinfo,v 1.457 2022/01/15 15:57:37 ryoon Exp $
 
-BLAKE2s (firefox-95.0.1.source.tar.xz) = 63da362545d9b746ea7076d4c68e6990725ad617cd122901bcc2895e57b80c40
-SHA512 (firefox-95.0.1.source.tar.xz) = 54887c3adbf7202b835ae1ac928c3c95516ef11f9894456561dad500a1a61623f926b37f6e02fef0898e7ee0fd9147a71e5432634e6e0a2c2fecd08509799c37
-Size (firefox-95.0.1.source.tar.xz) = 385073408 bytes
+BLAKE2s (firefox-96.0.1.source.tar.xz) = 5e7fbededc724ace26a51d47d025cee20873a5ee8d4b423d5c354acf4d80ba21
+SHA512 (firefox-96.0.1.source.tar.xz) = c0d2ccf9ca930def63dcb9dc269e47f60fd4bbbdcbc01463df0c30e11109a543e310fb36f2334d17b90cb9c96b8dcdd97d0e2d6c589a779de5e4f197c052f9a5
+Size (firefox-96.0.1.source.tar.xz) = 410542376 bytes
 BLAKE2s (nodejs-output-95.0.tgz) = c44b37d3605524a49157002f01c29f568f04194b0e635bc312de7ffdeb9a74c9
 SHA512 (nodejs-output-95.0.tgz) = 2faf326f4e100b66f8597c365cc2eb5d0eee26aae92a7e2446891f2178041aa71ba16eae37000acacd43a657025ec11c18db73b112f5c49cc21cdb882da6d798
 Size (nodejs-output-95.0.tgz) = 200627 bytes
@@ -18,23 +18,23 @@
 SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 4a6606da590cfb8d855bde58b9c6f90e98d0870c
 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 35d20981d33ccdb1d8ffb8039e48798777f11658
-SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 260c29bacd8bf265951b7a412f850bf2b292c836
+SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 6cdd0fe60455eab8f9846257c2bfea207f19478b
 SHA1 (patch-js_src_jit_ProcessExecutableMemory.cpp) = fad103cc698f9828ad58f742231984ec2bc27605
 SHA1 (patch-js_src_jit_arm64_vixl_MozCpu-vixl.cpp) = fdc522e3fb626b1b8a2ebf19ad60bfc25dfa4183
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
 SHA1 (patch-js_src_vm_ArrayBufferObject.cpp) = 0501fdcae11568ae4ea78e0d2f6b3750b7a67d47
-SHA1 (patch-layout_style_extra-bindgen-flags.in) = e6c3b68d887c112dacf6c2782e776dc55723eaec
+SHA1 (patch-libwebrtc.diff) = b6b72d25e240622f837832ab3a21522ee1741f0a
 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a
 SHA1 (patch-media_libcubeb_src_cubeb__alsa.c) = 2ef11da83c90c41490db4c0d9809c3e1826b488a
 SHA1 (patch-media_libcubeb_src_moz.build) = e4e64a1135cf4157ae5b6f7c1710ebd076953479
 SHA1 (patch-media_libpng_pngpriv.h) = c8084332560017cd7c9b519b61d125fa28af0dbc
 SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f
-SHA1 (patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_device__info__linux.cc) = f495b64d33db4940c0dfe8c36ddf82aa752b25d9
+SHA1 (patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_device__info__linux.cc) = 2e951d7d91934751608e99628fc144632d8a3b5c
 SHA1 (patch-modules_fdlibm_src_math__private.h) = 6ae3b0077b4a8c6088c35769fa1972cfc44ea9c1
 SHA1 (patch-mozglue_misc_Uptime.cpp) = daefe25ef1ebc8e4d3735017b9e8ac68c4710a00
 SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = 13e512c7ee9fa1e14ba415d62fa853e5fbfc91c0
 SHA1 (patch-security_nss_lib_freebl_mpi_mpi.c) = a7cd867916524770609d1c307a65b315b88456f4
-SHA1 (patch-third__party_libwebrtc_webrtc_modules_audio__processing_echo__detector_mean__variance__estimator.cc) = 5b0ccc4e8a66be37b2fe3ae30b47c40edb6aa831
+SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = 010222456cb2a7edc32cb8014033288c55167f73
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = 1c1397f6177728cf9deb2b74708069b9d09509c3
 SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 22a39e54e042ab2270a3cb54e4e307c8900cad12
 SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662
diff -r 38f57c865758 -r e9525a88b56d www/firefox/mozilla-common.mk
--- a/www/firefox/mozilla-common.mk     Sat Jan 15 15:51:29 2022 +0000
+++ b/www/firefox/mozilla-common.mk     Sat Jan 15 15:57:37 2022 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.220 2022/01/13 01:20:39 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.221 2022/01/15 15:57:37 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -137,6 +137,10 @@
 SUBST_FILES.fix-libpci-soname+=                ${MOZILLA_DIR}toolkit/xre/glxtest.cpp
 SUBST_SED.fix-libpci-soname+=          -e 's,"libpci.so, "lib${PCIUTILS_LIBNAME}.so,'
 
+# Workaround for link of libxul.so as of 96.0.
+# There are too many -ldl under third_paty/libwebrtc.
+BUILDLINK_TRANSFORM.NetBSD+=   rm:-ldl
+
 CONFIG_GUESS_OVERRIDE+=                ${MOZILLA_DIR}build/autoconf/config.guess
 CONFIG_GUESS_OVERRIDE+=                ${MOZILLA_DIR}js/src/build/autoconf/config.guess
 CONFIG_GUESS_OVERRIDE+=                ${MOZILLA_DIR}nsprpub/build/autoconf/config.guess
diff -r 38f57c865758 -r e9525a88b56d www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp
--- a/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp      Sat Jan 15 15:51:29 2022 +0000
+++ b/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp      Sat Jan 15 15:57:37 2022 +0000
@@ -1,9 +1,9 @@
-$NetBSD: patch-ipc_glue_GeckoChildProcessHost.cpp,v 1.13 2017/08/10 14:46:15 ryoon Exp $
+$NetBSD: patch-ipc_glue_GeckoChildProcessHost.cpp,v 1.14 2022/01/15 15:57:38 ryoon Exp $
 
 * Support Solaris
 * Fix NetBSD linking
 
---- ipc/glue/GeckoChildProcessHost.cpp.orig    2017-07-31 16:20:47.000000000 +0000
+--- ipc/glue/GeckoChildProcessHost.cpp.orig    2022-01-08 15:41:40.900244448 +0000
 +++ ipc/glue/GeckoChildProcessHost.cpp
 @@ -4,7 +4,13 @@
   * License, v. 2.0. If a copy of the MPL was not distributed with this
@@ -18,4 +18,4 @@
 +#endif
  
  #include "base/command_line.h"
- #include "base/string_util.h"
+ #include "base/process_util.h"
diff -r 38f57c865758 -r e9525a88b56d www/firefox/patches/patch-layout_style_extra-bindgen-flags.in
--- a/www/firefox/patches/patch-layout_style_extra-bindgen-flags.in     Sat Jan 15 15:51:29 2022 +0000
+++ /dev/null   Thu Jan 01 00:00:00 1970 +0000
@@ -1,10 +0,0 @@
-$NetBSD: patch-layout_style_extra-bindgen-flags.in,v 1.1 2021/12/11 14:10:01 ryoon Exp $
-
-Fix build failure, unicode/uenum.h not found error.
-https://hg.mozilla.org/integration/autoland/rev/b6be0f1bccf7
-
---- layout/style/extra-bindgen-flags.in.orig   2021-11-25 21:18:46.000000000 +0000
-+++ layout/style/extra-bindgen-flags.in
-@@ -1 +1 @@
--@BINDGEN_SYSTEM_FLAGS@ @NSPR_CFLAGS@ @MOZ_PIXMAN_CFLAGS@
-+@BINDGEN_SYSTEM_FLAGS@ @NSPR_CFLAGS@ @MOZ_PIXMAN_CFLAGS@ @MOZ_ICU_CFLAGS@
diff -r 38f57c865758 -r e9525a88b56d www/firefox/patches/patch-libwebrtc.diff
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/www/firefox/patches/patch-libwebrtc.diff  Sat Jan 15 15:57:37 2022 +0000
@@ -0,0 +1,282750 @@
+$NetBSD: patch-libwebrtc.diff,v 1.1 2022/01/15 15:57:38 ryoon Exp $
+
+* Fix build under *BSD. Based on Mozilla Bugzilla 1654448.
+* Add -msse2 to cc and c++ for x86 architecture unconditionally to fix build.
+
+diff -urN firefox-96.0.orig/dom/media/webrtc/third_party_build/gn-configs/generate-gn-build-files.sh firefox-96.0/dom/media/webrtc/third_party_build/gn-configs/generate-gn-build-files.sh
+--- dom/media/webrtc/third_party_build/gn-configs/generate-gn-build-files.sh   2021-12-29 06:54:42.000000000 +0900
++++ dom/media/webrtc/third_party_build/gn-configs/generate-gn-build-files.sh   2022-01-09 11:42:32.188322997 +0900
+@@ -92,6 +92,10 @@
+   CONFIGS="$CONFIGS x64_True_x64_win x64_False_x64_win"
+   CONFIGS="$CONFIGS x64_True_x86_win x64_False_x86_win"
+   IS_WIN=1
++elif [ "x$SYS_NAME" = "xNetBSD" ]; then
++  CONFIGS="x64_False_x64_netbsd x64_True_x64_netbsd"
++  CONFIGS="$CONFIGS x64_False_x86_netbsd x64_True_x86_netbsd"
++  CONFIGS="$CONFIGS x64_False_arm64_netbsd x64_True_arm64_netbsd"
+ else
+   # Ensure rust has the correct targets for building x86 and arm64.  These
+   # operations succeed quickly if previously completed.
+diff -urN firefox-96.0.orig/dom/media/webrtc/third_party_build/gn-configs/x64_False_arm64_netbsd.json firefox-96.0/dom/media/webrtc/third_party_build/gn-configs/x64_False_arm64_netbsd.json
+--- dom/media/webrtc/third_party_build/gn-configs/x64_False_arm64_netbsd.json  1970-01-01 09:00:00.000000000 +0900
++++ dom/media/webrtc/third_party_build/gn-configs/x64_False_arm64_netbsd.json  2022-01-09 11:33:49.243382362 +0900
+@@ -0,0 +1,43624 @@
++{
++    "gn_gen_args": {
++        "host_cpu": "x64",
++        "is_debug": false,
++        "target_cpu": "arm64",
++        "target_os": "netbsd"
++    },
++    "mozbuild_args": {
++        "CPU_ARCH": "aarch64",
++        "HOST_CPU_ARCH": "x86_64",
++        "MOZ_DEBUG": null,
++        "OS_TARGET": "NetBSD"
++    },
++    "sandbox_vars": {
++        "COMPILE_FLAGS": {
++            "WARNINGS_AS_ERRORS": []
++        },
++        "FINAL_LIBRARY": "webrtc"
++    },
++    "targets": {
++        "//:webrtc": {
++            "cflags": [
++                "-fno-strict-aliasing",
++                "--param=ssp-buffer-size=4",
++                "-fstack-protector",
++                "-funwind-tables",
++                "-fPIC",
++                "-pthread",
++                "-fcolor-diagnostics",
++                "-fmerge-all-constants",
++                "-fcrash-diagnostics-dir=../../../../third_party/libwebrtc/tools/clang/crashreports",
++                "-mllvm",
++                "-instcombine-lower-dbg-declare=0",
++                "-mllvm",
++                "-enable-dse-memoryssa=false",
++
++                "-Wno-builtin-macro-redefined",
++                "-D__DATE__=",
++                "-D__TIME__=",
++                "-D__TIMESTAMP__=",
++                "-Xclang",
++                "-fdebug-compilation-dir",
++                "-Xclang",
++                ".",
++                "-no-canonical-prefixes",
++                "-Wall",
++                "-Werror",
++                "-Wextra",
++                "-Wimplicit-fallthrough",
++                "-Wunreachable-code",
++                "-Wthread-safety",
++                "-Wextra-semi",
++                "-Wno-missing-field-initializers",
++                "-Wno-unused-parameter",
++                "-Wno-c++11-narrowing",
++                "-Wno-unneeded-internal-declaration",
++                "-Wno-undefined-var-template",
++                "-Wno-psabi",
++                "-Wno-ignored-pragma-optimize",
++                "-Wno-implicit-int-float-conversion",
++                "-Wno-final-dtor-non-final-class",
++                "-Wno-builtin-assume-aligned-alignment",
++                "-Wno-deprecated-copy",
++                "-Wno-non-c-typedef-for-linkage",
++                "-Wno-max-tokens",
++                "-O2",
++                "-fno-ident",
++                "-fdata-sections",
++                "-ffunction-sections",
++                "-fno-omit-frame-pointer",
++                "-g0",
++                "-ftrivial-auto-var-init=pattern",
++                "-fvisibility=hidden",
++                "-Wheader-hygiene",
++                "-Wstring-conversion",
++                "-Wtautological-overlap-compare",
++                "-Wexit-time-destructors",
++                "-Wglobal-constructors",
++                "-Wc++11-narrowing",
++                "-Wimplicit-fallthrough",
++                "-Wthread-safety",
++                "-Winconsistent-missing-override",
++                "-Wundef",
++                "-Wunused-lambda-capture",
++                "-Wno-shorten-64-to-32"
++            ],
++            "defines": [
++                "USE_UDEV",
++                "USE_AURA=1",
++                "USE_GLIB=1",
++                "USE_NSS_CERTS=1",
++                "USE_OZONE=1",
++                "USE_X11=1",
++                "_FILE_OFFSET_BITS=64",
++                "_LARGEFILE_SOURCE",
++                "_LARGEFILE64_SOURCE",
++                "_GNU_SOURCE",
++                "__STDC_CONSTANT_MACROS",
++                "__STDC_FORMAT_MACROS",
++                "_FORTIFY_SOURCE=2",
++                "CR_SYSROOT_HASH=ef67b6ca8fd6e2e51515a243d043d1ea4caf45e6",
++                "NDEBUG",
++                "NVALGRIND",
++                "DYNAMIC_ANNOTATIONS_ENABLED=0",
++                "WEBRTC_ENABLE_PROTOBUF=0",
++                "RTC_ENABLE_VP9",
++                "WEBRTC_ARCH_ARM64",
++                "WEBRTC_HAS_NEON",
++                "WEBRTC_LIBRARY_IMPL",
++                "WEBRTC_MOZILLA_BUILD",
++                "WEBRTC_NON_STATIC_TRACE_EVENT_HANDLERS=0",
++                "WEBRTC_POSIX",
++                "WEBRTC_BSD",
++                "ABSL_ALLOCATOR_NOTHROW=1"
++            ],
++            "deps": [
++                "//api/audio_codecs:builtin_audio_decoder_factory",
++                "//api/audio_codecs:builtin_audio_encoder_factory",
++                "//api/video:video_frame",
++                "//api/video:video_rtp_headers",
++                "//api/video_codecs:builtin_video_decoder_factory",
++                "//api/video_codecs:builtin_video_encoder_factory",
++                "//audio:audio",
++                "//call:call",
++                "//common_audio:common_audio",
++                "//common_video:common_video",
++                "//media:media",
++                "//modules:modules",
++                "//modules/video_capture:video_capture_internal_impl",
++                "//rtc_base:rtc_base",
++                "//test:rtp_test_utils",
++                "//video:video"
++            ],
++            "include_dirs": [
++                "//",
++                "//third_party/abseil-cpp/"
++            ],
++            "libs": [
++                "dl",
++                "rt",
++                "X11",
++                "Xcomposite",
++                "Xdamage",
++                "Xext",
++                "Xfixes",
++                "Xrender",
++                "Xrandr",
++                "Xtst",
++                "m"
++            ],
++            "sources": [],
++            "type": "static_library"
++        },
++        "//api/adaptation:resource_adaptation_api": {
++            "cflags": [



Home | Main Index | Thread Index | Old Index