[pkgsrc/trunk]: pkgsrc/www/firefox firefox: Update to 104.0.1

[ryoon <ryoon%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/744d6ffb8fa7
branches:  trunk
changeset: 384618:744d6ffb8fa7
user:      ryoon <ryoon%pkgsrc.org@localhost>
date:      Fri Sep 02 15:33:19 2022 +0000

description:
firefox: Update to 104.0.1

Changelog:
104.0.1
Fixed
  * Addresses an issue with Youtube video playback that was affecting some
    users.

104.0
New
  * Subtitles are now available for Disney+ in Picture-in-Picture.

  * Firefox now supports both the scroll-snap-stop property as well as
    re-snapping. You can use the scroll-snap-stop property's always and normal
    values to specify whether or not to pass the snap points, even when
    scrolling fast. Re-snapping tries to keep the last snap position after any
    content/layout changes.

  * The Firefox profiler can analyze power usage of a website (Apple M1 and
    Windows 11 only).

  * The Firefox UI itself will now be throttled for performance and battery
    usage when minimized or occluded, in the same way background tabs are.

Fixed

  * Highlight color is preserved correctly after typing Enter in the mail
    composer of Yahoo Mail and Outlook.

  * After bypassing the https only error page navigating back would take you to
    the error page that was previously dismissed. Back now takes you to the
    previous site that was visited.

  * Paste unformatted shortcut (shift+ctrl/cmd+v) now works in plain text
    contexts, such as input and text area.

  * Various security fixes.

Enterprise

  * Various bug fixes and new policies have been implemented in the latest
    version of Firefox. You can find more information in the Firefox for
    Enterprise 104 Release Notes.

Security fixes:
#CVE-2022-38472: Address bar spoofing via XSLT error handling
#CVE-2022-38473: Cross-origin XSLT Documents would have inherited the parent's
 permissions
#CVE-2022-38474: Recording notification not shown when microphone was recording
 on Android
#CVE-2022-38475: Attacker could write a value to a zero-length array
#CVE-2022-38477: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
#CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
 and Firefox ESR 91.13

diffstat:

 www/firefox/Makefile                                                                     |   6 +-
 www/firefox/distinfo                                                                     |   9 ++--
 www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc |  17 ++++++++++
 3 files changed, 25 insertions(+), 7 deletions(-)

diffs (60 lines):

diff -r 0de9140f85a1 -r 744d6ffb8fa7 www/firefox/Makefile
--- a/www/firefox/Makefile      Fri Sep 02 15:07:18 2022 +0000
+++ b/www/firefox/Makefile      Fri Sep 02 15:33:19 2022 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.535 2022/08/13 12:57:43 ryoon Exp $
+# $NetBSD: Makefile,v 1.536 2022/09/02 15:33:19 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            103.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            104.0
+MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}
diff -r 0de9140f85a1 -r 744d6ffb8fa7 www/firefox/distinfo
--- a/www/firefox/distinfo      Fri Sep 02 15:07:18 2022 +0000
+++ b/www/firefox/distinfo      Fri Sep 02 15:33:19 2022 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.481 2022/08/13 12:56:39 ryoon Exp $
+$NetBSD: distinfo,v 1.482 2022/09/02 15:33:19 ryoon Exp $
 
-BLAKE2s (firefox-103.0.2.source.tar.xz) = c18a54d1d068918c4ab9535e9b540c798db0ff83df3064612cc46bd1e663d0f7
-SHA512 (firefox-103.0.2.source.tar.xz) = f13984bb551039c80ef731931f08a284f070142ecb479b31a4caad026a6b535e3fc7ae506b629e933ba5f5a1676f14b6b36d031d22584170492676f8727c822a
-Size (firefox-103.0.2.source.tar.xz) = 481280156 bytes
+BLAKE2s (firefox-104.0.1.source.tar.xz) = a40cc6b01c59192c2a2b6cadd21c6a825027350d14ca63498118045668755dad
+SHA512 (firefox-104.0.1.source.tar.xz) = ad80fccfde34a201fc4b596c2a0a1d959abc132946dde0865b6da624a07fd9c57381bc268c394a17f295e0e183d122b2cf5c5126e8a0bc99684affaa6212e246
+Size (firefox-104.0.1.source.tar.xz) = 485616148 bytes
 BLAKE2s (nodejs-output-95.0.tgz) = c44b37d3605524a49157002f01c29f568f04194b0e635bc312de7ffdeb9a74c9
 SHA512 (nodejs-output-95.0.tgz) = 2faf326f4e100b66f8597c365cc2eb5d0eee26aae92a7e2446891f2178041aa71ba16eae37000acacd43a657025ec11c18db73b112f5c49cc21cdb882da6d798
 Size (nodejs-output-95.0.tgz) = 200627 bytes
@@ -37,6 +37,7 @@
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__linux.cc) = 2e951d7d91934751608e99628fc144632d8a3b5c
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
 SHA1 (patch-third__party_wasm2c_wasm2c_wasm-rt-os-unix.c) = 9b8ce4b823fd06951aac59bdb4a5642f256b8e3f
+SHA1 (patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc) = 5bfd94022f7defc0e4aafb2ee82c3c77eae1fb5f
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = bd7b2a0f2407c3ab95515b2f143c41c3ca6fb0c4
 SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 2303b753066298305ccae80d72765dbc4da5e0dc
 SHA1 (patch-toolkit_moz.configure) = 8de54693dc47b0993f220cc5a04af98925de1fb5
diff -r 0de9140f85a1 -r 744d6ffb8fa7 www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc  Fri Sep 02 15:33:19 2022 +0000
@@ -0,0 +1,17 @@
+$NetBSD: patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc,v 1.1 2022/09/02 15:33:19 ryoon Exp $
+
+* Fix build under NetBSD/i386 9. From protobuf-3.21.5.
+
+--- toolkit/components/protobuf/src/google/protobuf/arenastring.cc.orig        2022-08-19 01:24:42.000000000 +0000
++++ toolkit/components/protobuf/src/google/protobuf/arenastring.cc
+@@ -64,8 +64,8 @@ constexpr size_t kNewAlign = alignof(std
+ #endif
+ constexpr size_t kStringAlign = alignof(std::string);
+ 
+-static_assert((kStringAlign > kNewAlign ? kStringAlign : kNewAlign) >= 8, "");
+-static_assert(alignof(ExplicitlyConstructedArenaString) >= 8, "");
++static_assert((kStringAlign > kNewAlign ? kStringAlign : kNewAlign) >= 4, "");
++static_assert(alignof(ExplicitlyConstructedArenaString) >= 4, "");
+ 
+ }  // namespace
+