Commit Graph

41 Commits

Author SHA1 Message Date
naddy
939a18fbbc SECURITY update to 3.5.9:
MFSA 2010-24  XMLDocument::load() doesn't check nsIContentPolicy
MFSA 2010-23 Image src redirect to mailto: URL opens email editor
MFSA 2010-22 Update NSS to support TLS renegotiation indication
MFSA 2010-20 Chrome privilege escalation via forced URL drag and drop
MFSA 2010-19 Dangling pointer vulnerability in nsPluginArray
MFSA 2010-18 Dangling pointer vulnerability in nsTreeContentView
MFSA 2010-17 Remote code execution with use-after-free in nsTreeSelection
MFSA 2010-16 Crashes with evidence of memory corruption
2010-03-31 15:56:44 +00:00
landry
0e2574af7a Fix SIGBUS on sparc64 : https://bugzilla.mozilla.org/show_bug.cgi?id=514645
hints from martin@netbsd, many thanks!
ok naddy@
2010-03-25 16:34:09 +00:00
sthen
f13bb86663 SECURITY update to Firefox 3.5.8. Same diff from naddy@ and Daniel Dickman.
Update sqlite dependency while there.

ok naddy@
(reminder, ports is not fully open, do not commit without specific permission)
2010-02-24 16:59:49 +00:00
naddy
29007885ca minor reliability update to 3.5.7 2010-01-05 21:26:40 +00:00
steven
a68eb4c3e0 fix README.OpenBSD path in message
noticed by Kent R. Spillner
2009-12-26 20:56:24 +00:00
sthen
9998ef502d Use @unexec-delete instead of @unexec for the *-update-* goos.
prodded by espie@
discussed with espie@ ajacoutot@ landry@
2009-12-22 13:02:11 +00:00
naddy
8ee6746f58 SECURITY update to 3.5.6. Fixes:
MFSA 2009-71 GeckoActiveXObject exception messages can be used to enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-67 Integer overflow, crash in libtheora video library
MFSA 2009-66 Memory safety fixes in liboggplay media library
MFSA 2009-65 Crashes with evidence of memory corruption
2009-12-20 20:11:37 +00:00
naddy
ae373b07bf SECURITY update to 3.5.5. For the list of horrors, see
http://www.mozilla.org/security/known-vulnerabilities/firefox35.html
2009-11-27 21:18:52 +00:00
ajacoutot
6815706205 Firefox and Seamonkey bundle their own libnss3, so use same workaround
as for security/nss:
SHA1_Update conflicts with openssl which may be dynamically loaded
at runtime via libcups or libgssapi so causing a crash due to using
the wrong binding.  So rename here to avoid conflict.

ok jasper@ sthen@
2009-11-17 23:07:45 +00:00
martynas
84856b7c61 - create downloads dir with mode 0700 instead
- pass --disable-crashreporter
2009-09-18 20:35:27 +00:00
martynas
1e56ae8a3c security update to firefox35-3.5.3. MFSA 2009-51, MFSA 2009-50,
MFSA 2009-49, MFSA 2009-47.
http://www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.3
2009-09-10 22:18:59 +00:00
kili
8fc6287292 WANTLIB changes after xcb addition and bump. 2009-08-10 06:29:51 +00:00
martynas
4b8293aba5 on pthread_create failure, don't forget to unset & close handle 2009-08-03 22:15:51 +00:00
martynas
c815b2d914 security update to firefox35-3.5.2. 2009-08-03 21:27:00 +00:00
martynas
71ce12c718 put more work into sydney audio after the report from naddy@.
- fix some hella lame bugs inherited from sun, and clean up
- despite what the big clever comment says, callback thread will
be started twice if buffering is slow enough and will screw up
playback;  guard it
- supports s16 big endian as well
- audio_callback is void
- dont print stuff to stdout/stderr in the backend
- appropriately set writing buffer
- be more careful with lists in the audio callback
- create worker thread little bit earlier
- things i've forgotten to summarize
should fix stuttering videos & out-of-sync audio in weird cases.
2009-07-23 19:04:42 +00:00
martynas
30fec63c43 clean up dlsym nonsense; sndio will always be present for sydney
backend anyway
2009-07-23 17:17:41 +00:00
martynas
4578e9080a do not even try to let configure.in pick up nanojit on sparc64.
sparc* also matches sparc64;  however, native asm code is missing
for jit on sparc64, and jit is not ready for 64-bit in general (yet).
should fix sparc64.  reported by matthieu@.
2009-07-21 19:53:17 +00:00
martynas
f2426580b9 give it a chance to recongize some external libs. 2009-07-21 19:43:04 +00:00
martynas
24951976c2 implement sydney sndio backend. bump minor;
this was the last step of getting videos working alright.
problem reported by naddy@.
2009-07-21 12:12:37 +00:00
martynas
f9fb5e0574 - fix endianness checks
- dont use shared sems
2009-07-21 11:58:54 +00:00
martynas
17e560f7ba - mman needs types
- enable jit.  currently on i386, arm, sparc
tested by naddy@
javascript performance more than 2x faster, according to sunspider
benchmark
2009-07-20 23:41:34 +00:00
martynas
e0537b3889 recognize openbsd nanojit target; giving jit a chance to build 2009-07-20 20:04:02 +00:00
martynas
551b2abd47 add cacert class 1 & class 3 certs to ckfw builtins by default.
bumped minor, symbols were added.  req&ok naddy@
2009-07-19 18:38:08 +00:00
martynas
7af160a362 sndio backend for firefox 3.5 nssound. uses (external) audio/libcanberra
for system events, if installed.  resulting package does not depend
on it though.
2009-07-19 15:30:16 +00:00
martynas
84af2859fd stability update to firefox 3.5.1. MFSA 2009-41 doesn't affect this port 2009-07-17 17:09:35 +00:00
martynas
d7e4804640 firefox cert handling is unbearable. so automatically spawn 'Add
exception';  get cert;  and focus 'Confirm' so that one click or
Enter is needed to get in.
"OMGOMGOMG!!!!" marco@.  naddy@ did not object.
2009-07-15 20:42:39 +00:00
martynas
cb7ee39000 update to firefox35-3.5, final release. note that this is a separate
port;  for testing.  in the similar way that firefox 3.0 was two
releases ago.  we would rather people test final release rather
than some release candidate version.  use at your own risk.
ok naddy@
2009-06-30 16:16:00 +00:00
martynas
26431ebb0d ddo not even try to pick up&mix native nspr&nss; unbreaks if local
nss&nspr is presentt
cleanup xpconnect a bit
bump package name to p2
2009-06-23 17:55:57 +00:00
martynas
ca87e3e281 resolve collision (firefox.desktop) 2009-06-21 20:46:38 +00:00
martynas
2b3482f53c - firefox-bin -> firefox35-bin
- don't link mozilla-firefox-bin
- bump to p1.
2009-06-21 20:41:40 +00:00
martynas
9cef19971b let mozilla-firefox and firefox35 coexist together.
mozilla-firefox -> LOCALBASE/mozilla-firefox;  bin/firefox,bin/mozilla-firefox
firefox35 -> LOCALBASE/firefox35;  bin/firefox35
2009-06-21 18:50:06 +00:00
martynas
c5e74f99f5 register nspr&nss; regen plist
let nspr&nss find external sqlite3
RAND_DEV = /dev/arandom
--disable-jit
2009-06-21 18:42:15 +00:00
martynas
a9d474ce97 use local nss&nspr; remove external deps
run autoconf for nspr
pass NSS_ENABLE_ECC=1, NSS_USE_SYSTEM_SQLITE=1
bump so_version major to 21.0
bump pkgname to p0
2009-06-21 18:17:11 +00:00
martynas
b654f91899 use internal nspr&nss since i'm not going to update em at least
until after release
2009-06-21 15:04:16 +00:00
martynas
25c120b565 register&regen with proper mozjs
remove pkgpath/conflict markers
sync wantlib
depends on sqlite 3.6
2009-06-21 14:28:14 +00:00
martynas
d951ad9450 hunk not needed for nss-3.12.3; which we now have to depend on 2009-06-21 13:26:19 +00:00
martynas
1165083ba7 oggz_off_t is off_t
position is int64_t
2009-06-21 13:18:59 +00:00
martynas
0277f1cc84 workaround c++ parser problems of gcc 3
use openbsds sems
2009-06-21 12:30:58 +00:00
martynas
3aacbddd82 merge in some changes from mozilla-firefox:
CONFIGURE_ENV += PYTHON="${MODPY_BIN}" is inherited from the python module
turn off Ignore Scaling and Shrink to fit page width
sync switches w/ ff3
update about url
2009-06-21 11:41:31 +00:00
martynas
fb9602519b - use so_version for js
- add js to guess_dirs, and run autoconf for it
- dont redef system types
2009-06-21 11:36:11 +00:00
martynas
5473c857d7 import firefox35-3.5rc2, been using it for couple of months.
wip, not linked to the build yet.  needs nspr&nss updates.
2009-06-21 01:31:23 +00:00