CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Thu, 3 Aug 2023 22:02:34 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Thu Aug  3 22:02:33 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches:
            patch-ipc_chromium_src_base_platform__thread__posix.cc
Added Files:
        pkgsrc/www/firefox/patches:
            patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
Removed Files:
        pkgsrc/www/firefox/patches: patch-gfx_skia_skia_src_core_SkVM.cpp
            patch-js_src_jit_ProcessExecutableMemory.cpp
            patch-js_src_vm_ArrayBufferObject.cpp
            patch-third__party_wasm2c_wasm2c_wasm-rt-impl.c
            patch-widget_gtk_DMABufSurface.cpp

Log Message:
firefox: Update to 116.0

* speech-dispatcher is not tested yet.

Changelog:
New

  * Sidebar switcher allows users to access Bookmarks, History and Synced Tabs
    panels easily, quickly switch between them, move the sidebar to another
    side of the browser window, or close the sidebar. Now, keyboard users would
    be able to do it all with ease too, with or without any assistive
    technology running, without needing to memorize keyboard shortcuts to
    access these panels.

  * When an update is available in English locales, users will now have access
    to the release notes in the update notification prompt in the form of a
    "Learn More" link.

  * It is now possible to copy any file from your operating system and paste it
    into Firefox.

  * You asked, and we listened! The volume slider is now available in
    Picture-in-Picture.

  * We added the possibility to edit existing text annotations.

Fixed

  * The upload performance of HTTP/2 has been significantly improved starting
    with Firefox 115.0, particularly on those with a higher bandwidth delay
    product (i.e., networks characterized by both high bandwidth and high
    latency).

  * Various security fixes.

Changed

  * The keyboard shortcut to reopen closed tabs (command + shift + t) now
    reopens last closed tab or last closed window, in the order items were
    closed. If there aren't any tabs or windows to reopen, this command
    restores the previous session. This change is in anticipation of upcoming
    changes to recently closed tabs.

Security fixes:
#CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions
#CVE-2023-4046: Incorrect value used during WASM compilation
#CVE-2023-4047: Potential permissions request bypass via clickjacking
#CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions
#CVE-2023-4049: Fix potential race conditions when releasing platform objects
#CVE-2023-4050: Stack buffer overflow in StorageManager
#CVE-2023-4051: Full screen notification obscured by file open dialog
#CVE-2023-4052: File deletion and privilege escalation through Firefox
 uninstaller
#CVE-2023-4053: Full screen notification obscured by external program
#CVE-2023-4054: Lack of warning when opening appref-ms files
#CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state
#CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1,
 Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14
#CVE-2023-4057: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and
 Thunderbird 115.1
#CVE-2023-4058: Memory safety bugs fixed in Firefox 116


To generate a diff of this commit:
cvs rdiff -u -r1.563 -r1.564 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.501 -r1.502 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.258 -r1.259 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.8 -r1.9 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.5 -r0 \
    pkgsrc/www/firefox/patches/patch-gfx_skia_skia_src_core_SkVM.cpp
cvs rdiff -u -r1.12 -r1.13 \
    pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc
cvs rdiff -u -r1.3 -r0 \
    pkgsrc/www/firefox/patches/patch-js_src_jit_ProcessExecutableMemory.cpp \
    pkgsrc/www/firefox/patches/patch-js_src_vm_ArrayBufferObject.cpp
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/www/firefox/patches/patch-third__party_wasm2c_wasm2c_wasm-rt-impl.c
cvs rdiff -u -r1.6 -r0 \
    pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.563 pkgsrc/www/firefox/Makefile:1.564
--- pkgsrc/www/firefox/Makefile:1.563   Mon Jul 24 14:15:42 2023
+++ pkgsrc/www/firefox/Makefile Thu Aug  3 22:02:33 2023
@@ -1,18 +1,17 @@
-# $NetBSD: Makefile,v 1.563 2023/07/24 14:15:42 ryoon Exp $
+# $NetBSD: Makefile,v 1.564 2023/08/03 22:02:33 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            115.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            116.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
-PKGREVISION=   1
 CATEGORIES=    www
 MASTER_SITES+= ${MASTER_SITE_MOZILLA:=firefox/releases/${FIREFOX_VER}/source/}
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-115.0.tgz
+NODEJSKIT=             nodejs-output-116.0.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.501 pkgsrc/www/firefox/distinfo:1.502
--- pkgsrc/www/firefox/distinfo:1.501   Mon Jul 17 14:08:44 2023
+++ pkgsrc/www/firefox/distinfo Thu Aug  3 22:02:33 2023
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.501 2023/07/17 14:08:44 ryoon Exp $
+$NetBSD: distinfo,v 1.502 2023/08/03 22:02:33 ryoon Exp $
 
-BLAKE2s (firefox-115.0.2.source.tar.xz) = b6ab1a4aadc60740fea9f89fc0acba86072d7931e766b8ae25c439bbfea35a6f
-SHA512 (firefox-115.0.2.source.tar.xz) = de6ce8a2512e862c69a7d5c557d6168498d0d40e9c4b54b775f81c444e863a64c43130d57b51b360db4224c34b64a93f3ad263441caee713243b97750ec1eb4b
-Size (firefox-115.0.2.source.tar.xz) = 506385780 bytes
-BLAKE2s (nodejs-output-115.0.tgz) = 95d25628b865aa71e85c63001f4054d03ff58b273ca05784a021fa176b2b1425
-SHA512 (nodejs-output-115.0.tgz) = 345108033cfbff90e3244bb5591b307e1fcf56c7290b5112e949d400bdadf08c1e4a6d109b5f7264ac417c2cc4e76371cc14678417f6cb017649cc883bdbb4d4
-Size (nodejs-output-115.0.tgz) = 221458 bytes
+BLAKE2s (firefox-116.0.source.tar.xz) = 4c4470859eb0d87391a31c9a004d3309d218b2b385768369b1078d2c9e515498
+SHA512 (firefox-116.0.source.tar.xz) = 4370c65a99bf8796524aca11ea8e99fa4f875176a5805ad49f35ae149080eb54be42e7eae84627e87e17b88b262649e48f3b30b317170ac7c208960200d1005d
+Size (firefox-116.0.source.tar.xz) = 515487160 bytes
+BLAKE2s (nodejs-output-116.0.tgz) = 3d453c6500fa7c93997c795a937b581aa4494b54293218b6657758a2102fee97
+SHA512 (nodejs-output-116.0.tgz) = 16354fc33c3ccf4a8f392a410fc94d4851391621f2e4e3e15bfbb75027e0a9ae7f9f771391988f1ac177cb5d0deab70a4abdc71bfe4bfe39ac3e428a40e909a0
+Size (nodejs-output-116.0.tgz) = 219731 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = 3b01cf7e37ea39bdd358fb14de5ce382b945ae39
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
@@ -15,15 +15,12 @@ SHA1 (patch-dom_webtransport_api_WebTran
 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045
 SHA1 (patch-gfx_skia_skia_src_core_SkCpu.cpp) = 36218819254f3681b9c717d652ea78c9f20d49ad
-SHA1 (patch-gfx_skia_skia_src_core_SkVM.cpp) = 11d8084e933f68496fc4d2f57d1eb1065483bf9c
 SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
-SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 35d20981d33ccdb1d8ffb8039e48798777f11658
+SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 753bb4e90758f5b42a51bbc073b328de673988cf
 SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 6cdd0fe60455eab8f9846257c2bfea207f19478b
 SHA1 (patch-js_src_jit_FlushICache.cpp) = b7536050d06e87612fbedc7ce269b5f120eb0ce9
-SHA1 (patch-js_src_jit_ProcessExecutableMemory.cpp) = 1e25924a29e3700b0e0e5d143f1db35029b431fb
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
-SHA1 (patch-js_src_vm_ArrayBufferObject.cpp) = 374ffc0ce12e1c5babf2e553aba96612b0a30b1e
 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a
 SHA1 (patch-media_libpng_pngpriv.h) = c8084332560017cd7c9b519b61d125fa28af0dbc
 SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f
@@ -31,18 +28,17 @@ SHA1 (patch-modules_fdlibm_src_math__pri
 SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = b0d1f6a6e0eb852b0fd0238ad3f8ed3166c60a50
 SHA1 (patch-security_nss_lib_freebl_mpi_mpi.c) = a7cd867916524770609d1c307a65b315b88456f4
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
+SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = 06e0eb2c2832a5079940b54d918eba174e9876e3
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 8848fb05c1e8b45234f74db71602a8a84c0404a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
-SHA1 (patch-third__party_wasm2c_wasm2c_wasm-rt-impl.c) = cd5fd67f53d7a448cc9075a3756e2a03d4f43e4b
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
 SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 2303b753066298305ccae80d72765dbc4da5e0dc
 SHA1 (patch-toolkit_moz.configure) = c183f8b1566ffed0df17bf856f693b3a288affeb
 SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662
 SHA1 (patch-toolkit_xre_glxtest.cpp) = adcd5b05fcbd7b41c01a2aa66f3e8f05ed230444
-SHA1 (patch-widget_gtk_DMABufSurface.cpp) = 7d1d2d7770e563c7b912e24444254ae2791710ea
 SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec
 SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 81d43a046fcef6bf6717d52485686ba8e8738254

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.258 pkgsrc/www/firefox/mozilla-common.mk:1.259
--- pkgsrc/www/firefox/mozilla-common.mk:1.258  Fri Jul  7 21:57:08 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Thu Aug  3 22:02:33 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.258 2023/07/07 21:57:08 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.259 2023/08/03 22:02:33 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -219,6 +219,7 @@ CONFIGURE_ENV.NetBSD+=      ac_cv_thread_keyw
 # In unspecified case, clock_gettime(CLOCK_MONOTONIC, ...) fails.
 CONFIGURE_ENV.NetBSD+= ac_cv_clock_monotonic=
 
+.include "../../audio/speech-dispatcher/buildlink3.mk"
 .include "../../sysutils/pciutils/buildlink3.mk"
 .include "../../mk/atomic64.mk"
 BUILDLINK_API_DEPENDS.libevent+=       libevent>=1.1
@@ -227,7 +228,7 @@ BUILDLINK_API_DEPENDS.libevent+=    libeven
 BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.34
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/icu/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nss+=    nss>=3.90
+BUILDLINK_API_DEPENDS.nss+=    nss>=3.91
 .include "../../devel/nss/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 #.include "../../mk/jpeg.buildlink3.mk"

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.8 pkgsrc/www/firefox/files/node-wrapper.sh:1.9
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.8        Fri Jul  7 13:47:10 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Thu Aug  3 22:02:33 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v20.3.1
+VERS=v20.5.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc
diff -u pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc:1.12 pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc:1.13
--- pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc:1.12      Tue Mar 19 16:11:28 2019
+++ pkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_platform__thread__posix.cc   Thu Aug  3 22:02:33 2023
@@ -1,18 +1,17 @@
-$NetBSD: patch-ipc_chromium_src_base_platform__thread__posix.cc,v 1.12 2019/03/19 16:11:28 ryoon Exp $
+$NetBSD: patch-ipc_chromium_src_base_platform__thread__posix.cc,v 1.13 2023/08/03 22:02:33 ryoon Exp $
 
 * Support NetBSD
 * Support Solaris (we can't rely on pthread_setname_np so ignore it).
 
---- ipc/chromium/src/base/platform_thread_posix.cc.orig        2019-03-07 16:53:35.000000000 +0000
+--- ipc/chromium/src/base/platform_thread_posix.cc.orig        2023-07-20 18:06:23.000000000 +0000
 +++ ipc/chromium/src/base/platform_thread_posix.cc
 @@ -12,7 +12,9 @@
- #if defined(OS_MACOSX)
+ #if defined(XP_DARWIN)
  #  include <mach/mach.h>
- #elif defined(OS_NETBSD)
--#  include <lwp.h>
+ #elif defined(XP_NETBSD)
 +_Pragma("GCC visibility push(default)")
-+#include <lwp.h>
+ #  include <lwp.h>
 +_Pragma("GCC visibility pop")
- #elif defined(OS_LINUX)
+ #elif defined(XP_LINUX)
  #  include <sys/syscall.h>
  #  include <sys/prctl.h>

Added files:

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
diff -u /dev/null pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.1
--- /dev/null   Thu Aug  3 22:02:34 2023
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build     Thu Aug  3 22:02:33 2023
@@ -0,0 +1,43 @@
+$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.1 2023/08/03 22:02:33 ryoon Exp $
+
+* Disable Wayland desktop capture for non-Linux platforms.
+  Fix segfault under X11.
+
+--- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2023-07-27 19:00:30.752092736 +0000
++++ third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build
+@@ -239,7 +239,7 @@ if CONFIG["CPU_ARCH"] == "aarch64":
+     DEFINES["WEBRTC_ARCH_ARM64"] = True
+     DEFINES["WEBRTC_HAS_NEON"] = True
+ 
+-if CONFIG["CPU_ARCH"] == "arm":
++if CONFIG["CPU_ARCH"] == "arm" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
+ 
+     CXXFLAGS += [
+         "-mfpu=neon"
+@@ -350,7 +350,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
+ 
+     DEFINES["_HAS_ITERATOR_DEBUGGING"] = "0"
+ 
+-if CONFIG["CPU_ARCH"] == "aarch64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
++if CONFIG["CPU_ARCH"] == "aarch64" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
+ 
+     DEFINES["WEBRTC_ENABLE_AVX2"] = True
+     DEFINES["WEBRTC_USE_PIPEWIRE"] = True
+@@ -380,7 +380,7 @@ if CONFIG["CPU_ARCH"] == "aarch64" and (
+         "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
+     ]
+ 
+-if CONFIG["CPU_ARCH"] == "x86" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
++if CONFIG["CPU_ARCH"] == "x86" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
+ 
+     CXXFLAGS += [
+         "-msse2"
+@@ -414,7 +414,7 @@ if CONFIG["CPU_ARCH"] == "x86" and (CONF
+         "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
+     ]
+ 
+-if CONFIG["CPU_ARCH"] == "x86_64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
++if CONFIG["CPU_ARCH"] == "x86_64" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
+ 
+     DEFINES["WEBRTC_ENABLE_AVX2"] = True
+     DEFINES["WEBRTC_USE_PIPEWIRE"] = True

Prev by Date: CVS commit: pkgsrc
Next by Date: CVS commit: pkgsrc/doc
Previous by Thread: CVS commit: pkgsrc
Next by Thread: CVS commit: pkgsrc/doc
Indexes:

Home | Main Index | Thread Index | Old Index