CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Sat Jul 13 22:10:30 UTC 2024

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
Added Files:
        pkgsrc/www/firefox/patches:
            patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc
Removed Files:
        pkgsrc/www/firefox/patches: patch-gfx_skia_skia_src_core_SkCpu.cpp

Log Message:
www/firefox: Update to 128.0

* Use multimedia/ffmpeg7.

Changelog:
New

  * Firefox can now translate selections of text and hyperlinked text to other
    languages from the context menu.

  * For users in the US and Canada, Firefox will now show your recent searches
    or currently trending searches when you open the Address Bar to get you
    back to your previous search session or inspire your next one.

  * Firefox now has a simpler and more unified dialog for clearing user data.
    In addition to streamlining data categories, the new dialog also provides
    insights into the site data size corresponding to the selected time range.

  * Firefox now supports playback of protected content from streaming sites
    like Netflix while in Private Browsing mode.

  * Firefox now supports the experimental Privacy Preserving Attribution API,
    which provides an alternative to user tracking for ad attribution. This
    experiment is only enabled via origin trial and can be disabled in the new
    Website Advertising Preferences section in the Privacy and Security
    settings.

  * On macOS, microphone capture through getUserMedia will now use
    system-provided voice processing when applicable, improving audio quality.

  * Firefox is now available in the Saraiki (skr) language.

Fixed

  * Firefox now proxies DNS by default when using SOCKS v5, avoiding leaking
    DNS queries to the network when using SOCKS v5 proxies.

  * Various security fixes.

Security fixes:
Mozilla Foundation Security Advisory 2024-29
#CVE-2024-6605: Firefox Android missed activation delay to prevent tapjacking
#CVE-2024-6606: Out-of-bounds read in clipboard component
#CVE-2024-6607: Leaving pointerlock by pressing the escape key could be
 prevented
#CVE-2024-6608: Cursor could be moved out of the viewport using pointerlock.
#CVE-2024-6609: Memory corruption in NSS
#CVE-2024-6610: Form validation popups could block exiting full-screen mode
#CVE-2024-6600: Memory corruption in WebGL API
#CVE-2024-6601: Race condition in permission assignment
#CVE-2024-6602: Memory corruption in NSS
#CVE-2024-6603: Memory corruption in thread creation
#CVE-2024-6611: Incorrect handling of SameSite cookies
#CVE-2024-6612: CSP violation leakage when using devtools
#CVE-2024-6613: Incorrect listing of stack frames
#CVE-2024-6614: Incorrect listing of stack frames
#CVE-2024-6604: Memory safety bugs fixed in Firefox 128, Firefox ESR 115.13,
 and Thunderbird 115.13
#CVE-2024-6615: Memory safety bugs fixed in Firefox 128


To generate a diff of this commit:
cvs rdiff -u -r1.603 -r1.604 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.532 -r1.533 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.283 -r1.284 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.1 -r0 \
    pkgsrc/www/firefox/patches/patch-gfx_skia_skia_src_core_SkCpu.cpp
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.603 pkgsrc/www/firefox/Makefile:1.604
--- pkgsrc/www/firefox/Makefile:1.603   Fri Jun 28 13:19:52 2024
+++ pkgsrc/www/firefox/Makefile Sat Jul 13 22:10:30 2024
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.603 2024/06/28 13:19:52 ryoon Exp $
+# $NetBSD: Makefile,v 1.604 2024/07/13 22:10:30 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            127.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            128.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.532 pkgsrc/www/firefox/distinfo:1.533
--- pkgsrc/www/firefox/distinfo:1.532   Fri Jun 28 13:19:52 2024
+++ pkgsrc/www/firefox/distinfo Sat Jul 13 22:10:30 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.532 2024/06/28 13:19:52 ryoon Exp $
+$NetBSD: distinfo,v 1.533 2024/07/13 22:10:30 ryoon Exp $
 
-BLAKE2s (firefox-127.0.2.source.tar.xz) = 82feab9fe0fba70c9af0b682b1ce1b8899ca962eb6cd9ddddf6fc6fc74146eb3
-SHA512 (firefox-127.0.2.source.tar.xz) = d5a959a032309b8a42690b7f5afd5110c2e6ca7de426e1529d50f59cf065e67623ed98bf3aab39ce4d345ccfad2a273b24ce4f87c7ba7e6eccf2e9dfe3008d8b
-Size (firefox-127.0.2.source.tar.xz) = 554998504 bytes
+BLAKE2s (firefox-128.0.source.tar.xz) = 15e583fae33ff3a002adafe157df40054e7e3ceb594f50ad7a0cb8d2c99622c0
+SHA512 (firefox-128.0.source.tar.xz) = 309c0e2a0bea5699e6daf4fa02300ad7fd118d2c02c35cb5fa97a5fcc6e250cc7aec34e50fe872b8fd516436bfcfe37ddf33c9d0f9291860388cd6f3f08ea9f1
+Size (firefox-128.0.source.tar.xz) = 560761840 bytes
 BLAKE2s (nodejs-output-127.0.tgz) = 80641508926e10e327972b11ddef40b00f6215b4f527160b02bc7444ffdb3a2a
 SHA512 (nodejs-output-127.0.tgz) = 03371c3ee3b6b60fc81743e8d2e89f9c7c43f5a8b16775dd4cd23932b5e0776e03cf0d0875136d612b98c9bf4240197728df5f0b05e0ee82bf75738981398a95
 Size (nodejs-output-127.0.tgz) = 226801 bytes
@@ -15,7 +15,6 @@ SHA1 (patch-dom_base_nsAttrName.h) = ac7
 SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414
 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045
-SHA1 (patch-gfx_skia_skia_src_core_SkCpu.cpp) = 36218819254f3681b9c717d652ea78c9f20d49ad
 SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb
 SHA1 (patch-intl_lwbrk_LineBreaker.cpp) = e2eaf7d66f1255ba5baf7f7edadbb1fa8cb39b13
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
@@ -36,6 +35,7 @@ SHA1 (patch-third__party_libwebrtc_modul
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 4cb0e1c88dc83370024ed1aac7f75445b9f98df8
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
+SHA1 (patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc) = 6909c4da9e7b3785252e5bce9be0ff47ebb87e01
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.283 pkgsrc/www/firefox/mozilla-common.mk:1.284
--- pkgsrc/www/firefox/mozilla-common.mk:1.283  Fri Jun 28 18:34:02 2024
+++ pkgsrc/www/firefox/mozilla-common.mk        Sat Jul 13 22:10:30 2024
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.283 2024/06/28 18:34:02 gutteridge Exp $
+# $NetBSD: mozilla-common.mk,v 1.284 2024/07/13 22:10:30 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -255,7 +255,7 @@ RUST_REQ=   1.76.0
 # TODO: check again, pkgsrc has hunspell 1.7
 # was: textproc/hunspell 1.3 is too old
 #.include "../../textproc/hunspell/buildlink3.mk"
-.include "../../multimedia/ffmpeg6/buildlink3.mk"
+.include "../../multimedia/ffmpeg7/buildlink3.mk"
 .include "../../x11/libXt/buildlink3.mk"
 .include "../../x11/libXtst/buildlink3.mk"
 BUILDLINK_API_DEPENDS.pixman+= pixman>=0.40

Added files:

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc
diff -u /dev/null pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc:1.1
--- /dev/null   Sat Jul 13 22:10:30 2024
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc       Sat Jul 13 22:10:30 2024
@@ -0,0 +1,13 @@
+$NetBSD: patch-third__party_libwebrtc_rtc__base_physical__socket__server.cc,v 1.1 2024/07/13 22:10:30 ryoon Exp $
+
+--- third_party/libwebrtc/rtc_base/physical_socket_server.cc.orig      2024-07-03 20:25:45.412396416 +0000
++++ third_party/libwebrtc/rtc_base/physical_socket_server.cc
+@@ -770,7 +770,7 @@ int PhysicalSocket::TranslateOption(Opti
+       return -1;
+ #endif
+     case OPT_RECV_ECN:
+-#if defined(WEBRTC_POSIX)
++#if defined(WEBRTC_POSIX) && defined(IP_RECVTOS)
+       if (family_ == AF_INET6) {
+         *slevel = IPPROTO_IPV6;
+         *sopt = IPV6_RECVTCLASS;