CVS commit: pkgsrc/www/firefox

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Sep  2 15:33:19 UTC 2022

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo
Added Files:
        pkgsrc/www/firefox/patches:
            patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc

Log Message:
firefox: Update to 104.0.1

Changelog:
104.0.1
Fixed
  * Addresses an issue with Youtube video playback that was affecting some
    users.

104.0
New
  * Subtitles are now available for Disney+ in Picture-in-Picture.

  * Firefox now supports both the scroll-snap-stop property as well as
    re-snapping. You can use the scroll-snap-stop property's always and normal
    values to specify whether or not to pass the snap points, even when
    scrolling fast. Re-snapping tries to keep the last snap position after any
    content/layout changes.

  * The Firefox profiler can analyze power usage of a website (Apple M1 and
    Windows 11 only).

  * The Firefox UI itself will now be throttled for performance and battery
    usage when minimized or occluded, in the same way background tabs are.

Fixed

  * Highlight color is preserved correctly after typing Enter in the mail
    composer of Yahoo Mail and Outlook.

  * After bypassing the https only error page navigating back would take you to
    the error page that was previously dismissed. Back now takes you to the
    previous site that was visited.

  * Paste unformatted shortcut (shift+ctrl/cmd+v) now works in plain text
    contexts, such as input and text area.

  * Various security fixes.

Enterprise

  * Various bug fixes and new policies have been implemented in the latest
    version of Firefox. You can find more information in the Firefox for
    Enterprise 104 Release Notes.

Security fixes:
#CVE-2022-38472: Address bar spoofing via XSLT error handling
#CVE-2022-38473: Cross-origin XSLT Documents would have inherited the parent's
 permissions
#CVE-2022-38474: Recording notification not shown when microphone was recording
 on Android
#CVE-2022-38475: Attacker could write a value to a zero-length array
#CVE-2022-38477: Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
#CVE-2022-38478: Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
 and Firefox ESR 91.13


To generate a diff of this commit:
cvs rdiff -u -r1.535 -r1.536 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.481 -r1.482 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.535 pkgsrc/www/firefox/Makefile:1.536
--- pkgsrc/www/firefox/Makefile:1.535   Sat Aug 13 12:57:43 2022
+++ pkgsrc/www/firefox/Makefile Fri Sep  2 15:33:19 2022
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.535 2022/08/13 12:57:43 ryoon Exp $
+# $NetBSD: Makefile,v 1.536 2022/09/02 15:33:19 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            103.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            104.0
+MOZ_BRANCH_MINOR=      .1
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.481 pkgsrc/www/firefox/distinfo:1.482
--- pkgsrc/www/firefox/distinfo:1.481   Sat Aug 13 12:56:39 2022
+++ pkgsrc/www/firefox/distinfo Fri Sep  2 15:33:19 2022
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.481 2022/08/13 12:56:39 ryoon Exp $
+$NetBSD: distinfo,v 1.482 2022/09/02 15:33:19 ryoon Exp $
 
-BLAKE2s (firefox-103.0.2.source.tar.xz) = c18a54d1d068918c4ab9535e9b540c798db0ff83df3064612cc46bd1e663d0f7
-SHA512 (firefox-103.0.2.source.tar.xz) = f13984bb551039c80ef731931f08a284f070142ecb479b31a4caad026a6b535e3fc7ae506b629e933ba5f5a1676f14b6b36d031d22584170492676f8727c822a
-Size (firefox-103.0.2.source.tar.xz) = 481280156 bytes
+BLAKE2s (firefox-104.0.1.source.tar.xz) = a40cc6b01c59192c2a2b6cadd21c6a825027350d14ca63498118045668755dad
+SHA512 (firefox-104.0.1.source.tar.xz) = ad80fccfde34a201fc4b596c2a0a1d959abc132946dde0865b6da624a07fd9c57381bc268c394a17f295e0e183d122b2cf5c5126e8a0bc99684affaa6212e246
+Size (firefox-104.0.1.source.tar.xz) = 485616148 bytes
 BLAKE2s (nodejs-output-95.0.tgz) = c44b37d3605524a49157002f01c29f568f04194b0e635bc312de7ffdeb9a74c9
 SHA512 (nodejs-output-95.0.tgz) = 2faf326f4e100b66f8597c365cc2eb5d0eee26aae92a7e2446891f2178041aa71ba16eae37000acacd43a657025ec11c18db73b112f5c49cc21cdb882da6d798
 Size (nodejs-output-95.0.tgz) = 200627 bytes
@@ -37,6 +37,7 @@ SHA1 (patch-third__party_js_cfworker_bui
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__linux.cc) = 2e951d7d91934751608e99628fc144632d8a3b5c
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
 SHA1 (patch-third__party_wasm2c_wasm2c_wasm-rt-os-unix.c) = 9b8ce4b823fd06951aac59bdb4a5642f256b8e3f
+SHA1 (patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc) = 5bfd94022f7defc0e4aafb2ee82c3c77eae1fb5f
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = bd7b2a0f2407c3ab95515b2f143c41c3ca6fb0c4
 SHA1 (patch-toolkit_modules_subprocess_subprocess__shared__unix.js) = 2303b753066298305ccae80d72765dbc4da5e0dc
 SHA1 (patch-toolkit_moz.configure) = 8de54693dc47b0993f220cc5a04af98925de1fb5

Added files:

Index: pkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc
diff -u /dev/null pkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc:1.1
--- /dev/null   Fri Sep  2 15:33:19 2022
+++ pkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc     Fri Sep  2 15:33:19 2022
@@ -0,0 +1,17 @@
+$NetBSD: patch-toolkit_components_protobuf_src_google_protobuf_arenastring.cc,v 1.1 2022/09/02 15:33:19 ryoon Exp $
+
+* Fix build under NetBSD/i386 9. From protobuf-3.21.5.
+
+--- toolkit/components/protobuf/src/google/protobuf/arenastring.cc.orig        2022-08-19 01:24:42.000000000 +0000
++++ toolkit/components/protobuf/src/google/protobuf/arenastring.cc
+@@ -64,8 +64,8 @@ constexpr size_t kNewAlign = alignof(std
+ #endif
+ constexpr size_t kStringAlign = alignof(std::string);
+ 
+-static_assert((kStringAlign > kNewAlign ? kStringAlign : kNewAlign) >= 8, "");
+-static_assert(alignof(ExplicitlyConstructedArenaString) >= 8, "");
++static_assert((kStringAlign > kNewAlign ? kStringAlign : kNewAlign) >= 4, "");
++static_assert(alignof(ExplicitlyConstructedArenaString) >= 4, "");
+ 
+ }  // namespace
+