CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue Oct  1 12:47:19 UTC 2024

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk options.mk
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches: patch-js_src_vm_TypedArrayObject-inl.h
            patch-python_mozbuild_mozbuild_backend_recursivemake.py
Removed Files:
        pkgsrc/www/firefox/patches: patch-media_libtheora_lib_info.c
            patch-servo_components_style__traits_values.rs
            patch-servo_ports_geckolib_cbindgen.toml

Log Message:
www/firefox: Update to 130.0.1

Changelog:
130.0.1:
Fixed

  * Fixed a recent regression causing some UI elements to be rendered as
    left-to-right instead of right-to-left for users of our Saraiki
    localization. (Bug 1917175)

  * Linux: Fixed black rendering of AVIF images when Firefox is built with GCC.
    (Bug 1916038)

130.0:
New

  * Firefox now allows translating selected text portions to different
    languages after a full-page translation.

  * Firefox now offers an easy way to try experimental features with a new
    Firefox Labs page in Settings.

      + AI Chatbot feature lets you add the chatbot of your choice to the
        sidebar, for quick access as you browse.
      + Picture-in-Picture auto-open experiment enables PiP on active videos
        when switching tabs.

  * Overscroll animations are now enabled as the default behavior for
    scrollable areas on Linux.

  * Users in the United States and Canada can view local weather directly on
    the new tab page. Additionally, they have the option to select a specific
    location to see current weather conditions.

Fixed

  * Various security fixes.

  * Fixed an issue where Copy and Paste context menu items intermittently were
    not enabled when expected.

Mozilla Foundation Security Advisory 2024-39
#CVE-2024-8385: WASM type confusion involving ArrayTypes
#CVE-2024-8381: Type confusion when looking up a property name in a "with"
 block
#CVE-2024-8388: Fullscreen notice on Android could be hidden under various
 panels and OS prompts
#CVE-2024-8382: Internal event interfaces were exposed to web content when
 browser EventHandler listener callbacks ran
#CVE-2024-8383: Firefox did not ask before openings news: links in an external
 application
#CVE-2024-8384: Garbage collection could mis-color cross-compartment objects in
 OOM conditions
#CVE-2024-8386: SelectElements could be shown over another site if popups are
 allowed
#CVE-2024-8387: Memory safety bugs fixed in Firefox 130, Firefox ESR 128.2, and
 Thunderbird 128.2
#CVE-2024-8389: Memory safety bugs fixed in Firefox 130


To generate a diff of this commit:
cvs rdiff -u -r1.608 -r1.609 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.540 -r1.541 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.286 -r1.287 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.75 -r1.76 pkgsrc/www/firefox/options.mk
cvs rdiff -u -r1.21 -r1.22 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.1 -r1.2 \
    pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h \
    pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py
cvs rdiff -u -r1.4 -r0 \
    pkgsrc/www/firefox/patches/patch-media_libtheora_lib_info.c
cvs rdiff -u -r1.3 -r0 \
    pkgsrc/www/firefox/patches/patch-servo_components_style__traits_values.rs
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/www/firefox/patches/patch-servo_ports_geckolib_cbindgen.toml

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.608 pkgsrc/www/firefox/Makefile:1.609
--- pkgsrc/www/firefox/Makefile:1.608   Sat Aug 24 02:31:14 2024
+++ pkgsrc/www/firefox/Makefile Tue Oct  1 12:47:18 2024
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.608 2024/08/24 02:31:14 ryoon Exp $
+# $NetBSD: Makefile,v 1.609 2024/10/01 12:47:18 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            129.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            130.0
+MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
@@ -11,7 +11,7 @@ MASTER_SITES+=        ${MASTER_SITE_MOZILLA:=fi
 MASTER_SITES+= ${MASTER_SITE_MOZILLA_ALL:=firefox/releases/${FIREFOX_VER}/source/}
 EXTRACT_SUFX=  .tar.xz
 
-NODEJSKIT=             nodejs-output-129.0.tgz
+NODEJSKIT=             nodejs-output-130.0.tgz
 DISTFILES=             ${DEFAULT_DISTFILES} ${NODEJSKIT}
 SITES.${NODEJSKIT}=    ${MASTER_SITE_LOCAL}
 

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.540 pkgsrc/www/firefox/distinfo:1.541
--- pkgsrc/www/firefox/distinfo:1.540   Fri Sep 13 21:42:51 2024
+++ pkgsrc/www/firefox/distinfo Tue Oct  1 12:47:18 2024
@@ -1,11 +1,11 @@
-$NetBSD: distinfo,v 1.540 2024/09/13 21:42:51 wiz Exp $
+$NetBSD: distinfo,v 1.541 2024/10/01 12:47:18 ryoon Exp $
 
-BLAKE2s (firefox-129.0.2.source.tar.xz) = c7c48e7122b14a98e3af30b6032941439636c520dd52e9a5741192c5efe70e8c
-SHA512 (firefox-129.0.2.source.tar.xz) = f6805a87e5cb4e437583916e3ec1b312dc73eec5fc06ce7a038b13bd7c6827b18cf383c30645d96623ce41675351f3023ec6b9f89d676f1c889994eae79f2c13
-Size (firefox-129.0.2.source.tar.xz) = 559547204 bytes
-BLAKE2s (nodejs-output-129.0.tgz) = 79553f02d008686292c9bda2a2f3ec091e80ec757d746c21a705af2c93812504
-SHA512 (nodejs-output-129.0.tgz) = cf7e4833e3dc8da7ac0184bb6db108c33790708b0ba77659c5c097469f1322a95cfdb61347deb67b531551ddcde8593c14ced2bb5f89ec3854eea22defd33695
-Size (nodejs-output-129.0.tgz) = 228598 bytes
+BLAKE2s (firefox-130.0.1.source.tar.xz) = 2aee241b1375f2132fc79c2162d1f29134ff30c24ed23f544b46e2cac30b1ffa
+SHA512 (firefox-130.0.1.source.tar.xz) = 163d1ce9f671a4716686955c43ff23d9f200f6c52dfdabcbb93af6a326c24aa5096404f42447b02b5a3ad02e2f60d17271783638fe027d24865aebb3e70e97fe
+Size (firefox-130.0.1.source.tar.xz) = 566583020 bytes
+BLAKE2s (nodejs-output-130.0.tgz) = 26b8c396956a9616e6fbca147dce077a46f9234e2d5aa28705dab6522ce0efee
+SHA512 (nodejs-output-130.0.tgz) = c084f97e9d0bc33b6ac85957072723833494adeb367ef09c4c9c1ad851b6fdff322dd633308ff5861ee805d52d1b622b4b35d4d659ee931d58bb573d7c3819aa
+Size (nodejs-output-130.0.tgz) = 236896 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
@@ -25,17 +25,14 @@ SHA1 (patch-js_public_Utility.h) = bb546
 SHA1 (patch-js_src_jit_FlushICache.cpp) = d1e611eaf7d7be22abfac6b39fbcd99df3570e47
 SHA1 (patch-js_src_old-configure.in) = 589e24765615ede2c3c6abfe0b3529c5645193ed
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
-SHA1 (patch-js_src_vm_TypedArrayObject-inl.h) = 65e1dee34fa5e9f9d1424390f3baf6c0c070617b
+SHA1 (patch-js_src_vm_TypedArrayObject-inl.h) = e7913c8d4b2b05b67040baa64dae62d6ba40390e
 SHA1 (patch-media_ffvpx_libavutil_arm_bswap.h) = de58daa0fd23d4fec50426602b65c9ea5862558a
 SHA1 (patch-media_libpng_pngpriv.h) = 8320a1f7534ed5c4914b597bb3d6117d0060318f
-SHA1 (patch-media_libtheora_lib_info.c) = f6dbf536d73859a1ff78304c2e9f6a6f74dac01f
 SHA1 (patch-modules_fdlibm_src_math__private.h) = e20b6c23011d7123cbbd64a500eb8ce8c426620e
 SHA1 (patch-netwerk_protocol_http_nsHttpHandler.cpp) = 8e1d9a0746b637f5f4259e448e72172cfb08b23f
 SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = b0d1f6a6e0eb852b0fd0238ad3f8ed3166c60a50
-SHA1 (patch-python_mozbuild_mozbuild_backend_recursivemake.py) = d95a09c2e7a25888d6009dfe169ba459783dead4
+SHA1 (patch-python_mozbuild_mozbuild_backend_recursivemake.py) = 5be4183d9075f5a3a3c6b3e0338473af185fb50e
 SHA1 (patch-security_nss_lib_freebl_mpi_mpi.c) = a7cd867916524770609d1c307a65b315b88456f4
-SHA1 (patch-servo_components_style__traits_values.rs) = 6e1efb51bd68168abfa960b5e2541b3f46a49bf0
-SHA1 (patch-servo_ports_geckolib_cbindgen.toml) = f87b82cf179651199599f7b8c5d4feaa11b1f781
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = d0454784eb72be49162f619579e060a0de3c480f
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.286 pkgsrc/www/firefox/mozilla-common.mk:1.287
--- pkgsrc/www/firefox/mozilla-common.mk:1.286  Mon Aug 12 16:53:19 2024
+++ pkgsrc/www/firefox/mozilla-common.mk        Tue Oct  1 12:47:18 2024
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.286 2024/08/12 16:53:19 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.287 2024/10/01 12:47:18 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -35,9 +35,6 @@ USE_TOOLS+=           diff
 CONFIGURE_ENV+=                NODEJS="${FILESDIR}/node-wrapper.sh"
 .endif
 
-# malloc_usable_size()
-LDFLAGS.NetBSD+=       -ljemalloc
-
 .if ${MACHINE_ARCH} == "i386" || ${MACHINE_ARCH} == "x86_64"
 TOOL_DEPENDS+=         nasm>=2.14:../../devel/nasm
 TOOL_DEPENDS+=         yasm>=1.1:../../devel/yasm
@@ -234,10 +231,12 @@ CONFIGURE_ENV.NetBSD+=    ac_cv_clock_monot
 BUILDLINK_API_DEPENDS.libevent+=       libevent>=1.1
 .include "../../devel/libevent/buildlink3.mk"
 .include "../../devel/libffi/buildlink3.mk"
+# See build/moz.configure/nspr.configure
 BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.34
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/icu/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nss+=    nss>=3.102
+# See build/moz.configure/nss.configure
+BUILDLINK_API_DEPENDS.nss+=    nss>=3.103
 .include "../../devel/nss/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 #.include "../../mk/jpeg.buildlink3.mk"

Index: pkgsrc/www/firefox/options.mk
diff -u pkgsrc/www/firefox/options.mk:1.75 pkgsrc/www/firefox/options.mk:1.76
--- pkgsrc/www/firefox/options.mk:1.75  Thu Aug 17 20:43:43 2023
+++ pkgsrc/www/firefox/options.mk       Tue Oct  1 12:47:18 2024
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.75 2023/08/17 20:43:43 ryoon Exp $
+# $NetBSD: options.mk,v 1.76 2024/10/01 12:47:18 ryoon Exp $
 
 PKG_OPTIONS_VAR=       PKG_OPTIONS.firefox
 
@@ -32,6 +32,7 @@ CONFIGURE_ARGS+=      --enable-jemalloc
 CONFIGURE_ARGS+=       --enable-replace-malloc
 .else
 CONFIGURE_ARGS+=       --disable-jemalloc
+#.include "../../devel/jemalloc/buildlink3.mk"
 .endif
 
 .if !empty(PKG_OPTIONS:Mdebug)

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.21 pkgsrc/www/firefox/files/node-wrapper.sh:1.22
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.21       Mon Aug 12 14:03:32 2024
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Tue Oct  1 12:47:19 2024
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v22.5.1
+VERS=v22.7.0
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h
diff -u pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h:1.1 pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h:1.2
--- pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h:1.1       Sat Aug  3 02:06:31 2024
+++ pkgsrc/www/firefox/patches/patch-js_src_vm_TypedArrayObject-inl.h   Tue Oct  1 12:47:19 2024
@@ -1,11 +1,11 @@
-$NetBSD: patch-js_src_vm_TypedArrayObject-inl.h,v 1.1 2024/08/03 02:06:31 tsutsui Exp $
+$NetBSD: patch-js_src_vm_TypedArrayObject-inl.h,v 1.2 2024/10/01 12:47:19 ryoon Exp $
 
 - kludge to build on NetBSD/i386 10.0
   https://mail-index.netbsd.org/pkgsrc-users/2024/07/16/msg039900.html
 
---- js/src/vm/TypedArrayObject-inl.h.orig      2024-07-25 20:34:47.000000000 +0000
+--- js/src/vm/TypedArrayObject-inl.h.orig      2024-08-23 12:51:13.000000000 +0000
 +++ js/src/vm/TypedArrayObject-inl.h
-@@ -404,7 +404,9 @@ class ElementSpecific {
+@@ -435,7 +435,9 @@ class ElementSpecific {
      // `malloc` returns memory at least as strictly aligned as for max_align_t
      // and the alignment of max_align_t is a multiple of the size of `T`,
      // so `SharedMem::cast` will be called with properly aligned memory.
@@ -13,5 +13,5 @@ $NetBSD: patch-js_src_vm_TypedArrayObjec
      static_assert(alignof(std::max_align_t) % sizeof(T) == 0);
 +#endif
  
-     SharedMem<T*> dest =
-         target->dataPointerEither().template cast<T*>() + offset;
+     SharedMem<T*> dest = Ops::extract(target).template cast<T*>() + offset;
+     SharedMem<void*> data = Ops::extract(source);
Index: pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py
diff -u pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py:1.1 pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py:1.2
--- pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py:1.1      Mon Aug 12 14:03:32 2024
+++ pkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_backend_recursivemake.py  Tue Oct  1 12:47:19 2024
@@ -1,11 +1,11 @@
-$NetBSD: patch-python_mozbuild_mozbuild_backend_recursivemake.py,v 1.1 2024/08/12 14:03:32 ryoon Exp $
+$NetBSD: patch-python_mozbuild_mozbuild_backend_recursivemake.py,v 1.2 2024/10/01 12:47:19 ryoon Exp $
 
 * As of 129.0, libxul.so is built with -Wl,-z,defs (no undefined references).
   Supply memalign() from fallback.cpp (Unified_cpp_memory_build0) for NetBSD.
   This approach is completely incorrect, however I do not find the correct
   way to include Unified_cpp_memory_build0.o to objs yet.
 
---- python/mozbuild/mozbuild/backend/recursivemake.py.orig     2024-08-01 17:32:03.000000000 +0000
+--- python/mozbuild/mozbuild/backend/recursivemake.py.orig     2024-08-23 12:51:15.000000000 +0000
 +++ python/mozbuild/mozbuild/backend/recursivemake.py
 @@ -73,6 +73,8 @@ from ..util import FileAvoidWrite, ensur
  from .common import CommonBackend
@@ -16,9 +16,9 @@ $NetBSD: patch-python_mozbuild_mozbuild_
  # To protect against accidentally adding logic to Makefiles that belong in moz.build,
  # we check if moz.build-like variables are defined in Makefiles. If they are, we throw
  # an error to encourage the usage of moz.build instead.
-@@ -1427,6 +1429,8 @@ class RecursiveMakeBackend(MakeBackend):
-             return os.path.normpath(mozpath.relpath(path, obj.objdir))
+@@ -1426,6 +1428,8 @@ class RecursiveMakeBackend(MakeBackend):
  
+     def _process_linked_libraries(self, obj, backend_file):
          objs, shared_libs, os_libs, static_libs = self._expand_libs(obj)
 +        if buildconfig.substs["OS_ARCH"] == "NetBSD" and obj.name == "libxul.so":
 +            objs.append("memory/build/Unified_cpp_memory_build0.o")