CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Tue, 5 Sep 2023 14:08:40 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Tue Sep  5 14:08:40 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches: patch-browser_app_profile_firefox.js
            patch-ipc_glue_GeckoChildProcessHost.cpp
            patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
            patch-toolkit_modules_subprocess_subprocess__shared__unix.js

Log Message:
firefox: Update to 117.0

Changelog:
New
  * Support for credit card autofill has been extended to users running Firefox
    in the IT, ES, AT, BE, and PL locales.

  * macOS users can now control the tabability of controls and links via
    about:preferences.
    Screenshot of new macOS tabability option in about:preferences

  * To avoid undesirable outcomes on sites which specify their own behavior
    when pressing shift+right-click, Firefox now has a
    dom.event.contextmenu.shift_suppresses_event preference to prevent the
    context menu from appearing.

Fixed
  * YouTube video lists now scroll correctly when navigating with a screen
    reader.

  * Various security fixes.

Changed
  * Firefox no longer shows its own screen sharing indicator on Wayland desktop
    environments. The system default sharing indicator will be used instead.

Enterprise
  * You can find information about policy updates and enterprise specific bug
    fixes in the Firefox for Enterprise 117 Release Notes.

Developer
  * Developer Information
  * Web compatibility inspection has been enhanced with our new CSS
    compatibility tooltip in the Developer Tools Inspector. An icon is now
    displayed next to properties that could lead to web compatibility issues.
    When hovered, the tooltip indicates which browsers are not supported and
    displays a link to the MDN page for the property so the user can learn more
    about it.
    Screenshot showing CSS compatibility icon for a property shown in the
    Inspector

  * console.clear() no longer clears the Console output if the "Enable
    persistent logs" option is enabled.

Web Platform
  * Support for improved CSS nesting is now enabled by default.

  * Firefox now supports RTCRtpScriptTransform.

  * ReadableStream.from is now supported, allowing creation of a ReadableStream
    from an (async) iterable.

  * Firefox now supports the math-style and math-depth CSS properties and the
    font-size: math value.

Security fixes:
#CVE-2023-4573: Memory corruption in IPC CanvasTranslator
#CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback
#CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback
#CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation
#CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics
#CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an
 Out of Memory Exception
#CVE-2023-4579: Persisted search terms were formatted as URLs
#CVE-2023-4580: Push notifications saved to disk unencrypted
#CVE-2023-4581: XLL file extensions were downloadable without warnings
#CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv
#CVE-2023-4583: Browsing Context potentially not cleared when closing Private
 Window
#CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15,
 Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
#CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and
 Thunderbird 115.2


To generate a diff of this commit:
cvs rdiff -u -r1.568 -r1.569 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.507 -r1.508 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.9 -r1.10 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.19 -r1.20 \
    pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js
cvs rdiff -u -r1.14 -r1.15 \
    pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp
cvs rdiff -u -r1.1 -r1.2 \
    pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
cvs rdiff -u -r1.3 -r1.4 \
    pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.568 pkgsrc/www/firefox/Makefile:1.569
--- pkgsrc/www/firefox/Makefile:1.568   Tue Aug 22 13:48:16 2023
+++ pkgsrc/www/firefox/Makefile Tue Sep  5 14:08:39 2023
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.568 2023/08/22 13:48:16 tnn Exp $
+# $NetBSD: Makefile,v 1.569 2023/09/05 14:08:39 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            116.0
-MOZ_BRANCH_MINOR=      .3
-PKGREVISION=           1
+MOZ_BRANCH=            117.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.507 pkgsrc/www/firefox/distinfo:1.508
--- pkgsrc/www/firefox/distinfo:1.507   Tue Aug 22 13:48:16 2023
+++ pkgsrc/www/firefox/distinfo Tue Sep  5 14:08:39 2023
@@ -1,12 +1,12 @@
-$NetBSD: distinfo,v 1.507 2023/08/22 13:48:16 tnn Exp $
+$NetBSD: distinfo,v 1.508 2023/09/05 14:08:39 ryoon Exp $
 
-BLAKE2s (firefox-116.0.3.source.tar.xz) = 22e0a147eaeab2c65516f3bd7277ba7ff45e232d7f2ba56179f6f5a6c88bd6c0
-SHA512 (firefox-116.0.3.source.tar.xz) = 194c50e9ba5a918c37fbef8cd72ffb98e5e9f51955d8172b6666a758b5f20777ca0a7f79dff0328305fb6dafefb102ab002e326f47d0965a4dc6d3e9287c42b9
-Size (firefox-116.0.3.source.tar.xz) = 520884220 bytes
+BLAKE2s (firefox-117.0.source.tar.xz) = b1b257ab21785e628241e3fc5c8def2488806578c4f2caf21e0993056660da5c
+SHA512 (firefox-117.0.source.tar.xz) = 4d2afa9bac9d0724fb3568f77a8103d75e90635802f47f2023127de07d70ff145fb0c19e6a4fd37bfe93a7bbb1ec506955c0d4fe3b07057561ebea82b8d6c8d2
+Size (firefox-117.0.source.tar.xz) = 505712192 bytes
 BLAKE2s (nodejs-output-116.0.tgz) = 3d453c6500fa7c93997c795a937b581aa4494b54293218b6657758a2102fee97
 SHA512 (nodejs-output-116.0.tgz) = 16354fc33c3ccf4a8f392a410fc94d4851391621f2e4e3e15bfbb75027e0a9ae7f9f771391988f1ac177cb5d0deab70a4abdc71bfe4bfe39ac3e428a40e909a0
 Size (nodejs-output-116.0.tgz) = 219731 bytes
-SHA1 (patch-browser_app_profile_firefox.js) = 3b01cf7e37ea39bdd358fb14de5ce382b945ae39
+SHA1 (patch-browser_app_profile_firefox.js) = 02dba3b012e058ed27cd3314f045a7f686f20b64
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
 SHA1 (patch-config_makefiles_rust.mk) = 788ab8fed45625bc5552c56a3ab05b5ed7d49a8f
@@ -18,7 +18,7 @@ SHA1 (patch-gfx_skia_skia_src_core_SkCpu
 SHA1 (patch-gfx_wr_swgl_build.rs) = df6ebfaabb4d27994e59a9d0eaf12c7cf08415fb
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 753bb4e90758f5b42a51bbc073b328de673988cf
-SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 6cdd0fe60455eab8f9846257c2bfea207f19478b
+SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 63fbee04321f7ade20db4ccc1a1218b848344ce1
 SHA1 (patch-js-src-jit-arm64-vixl-MozCpu-vixl.cpp) = acb31066cd407e9e08cb7a7b6c4d0e702f5a8107
 SHA1 (patch-js_src_jit_FlushICache.cpp) = d1e611eaf7d7be22abfac6b39fbcd99df3570e47
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
@@ -29,7 +29,7 @@ SHA1 (patch-modules_fdlibm_src_math__pri
 SHA1 (patch-nsprpub_pr_src_pthreads_ptsynch.c) = b0d1f6a6e0eb852b0fd0238ad3f8ed3166c60a50
 SHA1 (patch-security_nss_lib_freebl_mpi_mpi.c) = a7cd867916524770609d1c307a65b315b88456f4
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
-SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = 06e0eb2c2832a5079940b54d918eba174e9876e3
+SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = e2dfa63e628527014509622b86baf62cb98ceb44
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = 455be625b5de2f6f1f4b2dbb6c8cb33ca16c2583
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 8848fb05c1e8b45234f74db71602a8a84c0404a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
@@ -37,7 +37,7 @@ SHA1 (patch-third__party_libwebrtc_syste
 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
-SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 2303b753066298305ccae80d72765dbc4da5e0dc
+SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 445902ec9750622357001f07f0c5f49276a2b6f6
 SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b
 SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662
 SHA1 (patch-toolkit_xre_glxtest.cpp) = adcd5b05fcbd7b41c01a2aa66f3e8f05ed230444

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.9 pkgsrc/www/firefox/files/node-wrapper.sh:1.10
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.9        Thu Aug  3 22:02:33 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Tue Sep  5 14:08:39 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v20.5.0
+VERS=v20.5.1
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js
diff -u pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js:1.19 pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js:1.20
--- pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js:1.19        Sun Jun  4 09:26:35 2023
+++ pkgsrc/www/firefox/patches/patch-browser_app_profile_firefox.js     Tue Sep  5 14:08:39 2023
@@ -1,24 +1,11 @@
-$NetBSD: patch-browser_app_profile_firefox.js,v 1.19 2023/06/04 09:26:35 ryoon Exp $
+$NetBSD: patch-browser_app_profile_firefox.js,v 1.20 2023/09/05 14:08:39 ryoon Exp $
 
 This patch modifies default Firefox settings - see the comments above
 each one.
 
---- browser/app/profile/firefox.js.orig        2023-05-22 16:53:55.000000000 +0000
+--- browser/app/profile/firefox.js.orig        2023-08-17 21:21:27.000000000 +0000
 +++ browser/app/profile/firefox.js
-@@ -2120,7 +2120,11 @@ pref("reader.pocket.ctaVersion", "");
- 
- pref("view_source.tab", true);
- 
--pref("dom.serviceWorkers.enabled", true);
-+// On NetBSD, many web applications (e.g. Telegram, Mastodon, Twitter)
-+// will freeze until the service worker is restarted in about:serviceworkers.
-+// This is a workaround that makes most of these sites function.
-+// The root cause of this should be investigated.
-+pref("dom.serviceWorkers.enabled", false);
- 
- // Enable Push API.
- pref("dom.push.enabled", true);
-@@ -2329,6 +2333,30 @@ pref("app.normandy.onsync_skew_sec", 600
+@@ -2340,6 +2340,36 @@ pref("app.normandy.onsync_skew_sec", 600
  pref("toolkit.coverage.enabled", false);
  pref("toolkit.coverage.endpoint.base", "https://coverage.mozilla.org";);
  
@@ -44,7 +31,13 @@ each one.
 +pref("media.navigator.permission.disabled", true);
 +
 +// DIsable WebGL for NetBSD systems
-+pref("webgl.disabled", true);
++pref("Webgl.disabled", true);
++
++// On NetBSD, many web applications (e.g. Telegram, Mastodon, Twitter)
++// will freeze until the service worker is restarted in about:serviceworkers.
++// This is a workaround that makes most of these sites function.
++// The root cause of this should be investigated.
++pref("dom.serviceWorkers.enabled", false);
 +
  // Discovery prefs
  pref("browser.discovery.enabled", true);

Index: pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp
diff -u pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp:1.14 pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp:1.15
--- pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp:1.14    Sat Jan 15 15:57:38 2022
+++ pkgsrc/www/firefox/patches/patch-ipc_glue_GeckoChildProcessHost.cpp Tue Sep  5 14:08:39 2023
@@ -1,9 +1,9 @@
-$NetBSD: patch-ipc_glue_GeckoChildProcessHost.cpp,v 1.14 2022/01/15 15:57:38 ryoon Exp $
+$NetBSD: patch-ipc_glue_GeckoChildProcessHost.cpp,v 1.15 2023/09/05 14:08:39 ryoon Exp $
 
 * Support Solaris
 * Fix NetBSD linking
 
---- ipc/glue/GeckoChildProcessHost.cpp.orig    2022-01-08 15:41:40.900244448 +0000
+--- ipc/glue/GeckoChildProcessHost.cpp.orig    2023-08-17 21:21:29.000000000 +0000
 +++ ipc/glue/GeckoChildProcessHost.cpp
 @@ -4,7 +4,13 @@
   * License, v. 2.0. If a copy of the MPL was not distributed with this
@@ -18,4 +18,4 @@ $NetBSD: patch-ipc_glue_GeckoChildProces
 +#endif
  
  #include "base/command_line.h"
- #include "base/process_util.h"
+ #include "base/process.h"

Index: pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
diff -u pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.1 
pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.2
--- pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.1 Thu Aug  3 22:02:33 2023
+++ pkgsrc/www/firefox/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build     Tue Sep  5 14:08:39 2023
@@ -1,11 +1,11 @@
-$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.1 2023/08/03 22:02:33 ryoon Exp $
+$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.2 2023/09/05 14:08:39 ryoon Exp $
 
 * Disable Wayland desktop capture for non-Linux platforms.
   Fix segfault under X11.
 
---- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2023-07-27 19:00:30.752092736 +0000
+--- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2023-08-19 22:56:46.029204839 +0000
 +++ third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build
-@@ -239,7 +239,7 @@ if CONFIG["CPU_ARCH"] == "aarch64":
+@@ -236,7 +236,7 @@ if CONFIG["CPU_ARCH"] == "aarch64":
      DEFINES["WEBRTC_ARCH_ARM64"] = True
      DEFINES["WEBRTC_HAS_NEON"] = True
  
@@ -14,16 +14,16 @@ $NetBSD: patch-third__party_libwebrtc_mo
  
      CXXFLAGS += [
          "-mfpu=neon"
-@@ -350,7 +350,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
+@@ -414,7 +414,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
  
      DEFINES["_HAS_ITERATOR_DEBUGGING"] = "0"
  
 -if CONFIG["CPU_ARCH"] == "aarch64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["CPU_ARCH"] == "aarch64" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
  
-     DEFINES["WEBRTC_ENABLE_AVX2"] = True
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
-@@ -380,7 +380,7 @@ if CONFIG["CPU_ARCH"] == "aarch64" and (
+     DEFINES["_GNU_SOURCE"] = True
+@@ -443,7 +443,7 @@ if CONFIG["CPU_ARCH"] == "aarch64" and (
          "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
      ]
  
@@ -32,12 +32,12 @@ $NetBSD: patch-third__party_libwebrtc_mo
  
      CXXFLAGS += [
          "-msse2"
-@@ -414,7 +414,7 @@ if CONFIG["CPU_ARCH"] == "x86" and (CONF
+@@ -476,7 +476,7 @@ if CONFIG["CPU_ARCH"] == "x86" and (CONF
          "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
      ]
  
 -if CONFIG["CPU_ARCH"] == "x86_64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["CPU_ARCH"] == "x86_64" and CONFIG['MOZ_WAYLAND'] == "1" and CONFIG["OS_TARGET"] == "Linux":
  
-     DEFINES["WEBRTC_ENABLE_AVX2"] = True
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
+     DEFINES["_GNU_SOURCE"] = True

Index: pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js
diff -u pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js:1.3 pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js:1.4
--- pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js:1.3 Mon Jun  6 20:59:40 2022
+++ pkgsrc/www/firefox/patches/patch-toolkit_modules_subprocess_subprocess__shared__unix.js     Tue Sep  5 14:08:39 2023
@@ -1,15 +1,15 @@
-$NetBSD: patch-toolkit_modules_subprocess_subprocess__shared__unix.js,v 1.3 2022/06/06 20:59:40 ryoon Exp $
+$NetBSD: patch-toolkit_modules_subprocess_subprocess__shared__unix.js,v 1.4 2023/09/05 14:08:39 ryoon Exp $
 
 Fix broken native messaging on NetBSD and possibly other BSDs too:
 https://bugzilla.mozilla.org/show_bug.cgi?id=1543602
 
 Please remove this patch when the upstream issue is resolved.
 
---- toolkit/modules/subprocess/subprocess_shared_unix.js.orig  2022-05-20 10:44:23.277253777 +0000
+--- toolkit/modules/subprocess/subprocess_shared_unix.js.orig  2023-08-17 21:21:43.000000000 +0000
 +++ toolkit/modules/subprocess/subprocess_shared_unix.js
-@@ -13,7 +13,15 @@
+@@ -16,7 +16,15 @@
  
- var LIBC = OS.Constants.libc;
+ var LIBC = ChromeUtils.getLibcConstants();
  
 -const LIBC_CHOICES = ["libc.so", "libSystem.B.dylib", "a.out"];
 +/* libc.so isn't meant to be dlopen'ed. On Linux it's usually an ld

Prev by Date: CVS commit: pkgsrc/security/keepassxc
Next by Date: CVS commit: pkgsrc/www/firefox-l10n
Previous by Thread: CVS commit: pkgsrc/security/keepassxc
Next by Thread: CVS commit: pkgsrc/www/firefox-l10n
Indexes:

Home | Main Index | Thread Index | Old Index