CVS commit: pkgsrc/www/firefox

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/www/firefox
From: "Ryo ONODERA" <ryoon%netbsd.org@localhost>
Date: Fri, 7 Jul 2023 13:47:10 +0000

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Fri Jul  7 13:47:10 UTC 2023

Modified Files:
        pkgsrc/www/firefox: Makefile distinfo mozilla-common.mk
        pkgsrc/www/firefox/files: node-wrapper.sh
        pkgsrc/www/firefox/patches: patch-config_makefiles_rust.mk
            patch-third__party_sqlite3_src_moz.build
            patch-widget_gtk_DMABufSurface.cpp

Log Message:
firefox: Update to 115.0

Changelog:
New

  * Migrating from another browser? Now you can bring over payment methods
    you've saved in Chrome-based browsers to Firefox.

  * Hardware video decoding is now enabled for Intel GPUs on Linux.

  * The Tab Manager dropdown now features close buttons, so you can close tabs
    more quickly.

  * We've refreshed and streamlined the user interface for importing data in
    from other browsers.

  * Users without platform support for H264 video decoding can now fallback to
    Cisco's OpenH264 plugin for playback.

Fixed

  * Windows Magnifier now follows the text cursor correctly when the Firefox
    title bar is visible.

  * Windows users on low-end/USB wifi drivers and with OS geolocation disabled
    can now approve geolocation on a case by case basis without causing
    system-wide network instability.

  * Various security fixes.

Changed

  * Undo and redo are now available in Password fields.

  * On Linux, middle clicks on the new tab button will now open the xclipboard
    contents in the new tab. If the xclipboard content is a URL then that URL
    is opened, any other text is opened with your default search provider.

  * For users with a Firefox Colorways built-in theme, the theme will be
    automatically migrated to the same theme hosted on addons.mozilla.org for
    Firefox profiles that have disabled add-ons auto-updates. This will allow
    users to keep their Colorways theme when they are later removed from
    Firefox installer files.

  * Certain Firefox users may come across a message in the extensions panel
    indicating that their add-ons are not allowed on the site currently open.
    We have introduced a new back-end feature to only allow some extensions
    monitored by Mozilla to run on specific websites for various reasons,
    including security concerns.

Security fixes:
#CVE-2023-3482: Block all cookies bypass for localstorage
#CVE-2023-37201: Use-after-free in WebRTC certificate generation
#CVE-2023-37202: Potential use-after-free from compartment mismatch in
 SpiderMonkey
#CVE-2023-37203: Drag and Drop API may provide access to local system files
#CVE-2023-37204: Fullscreen notification obscured via option element
#CVE-2023-37205: URL spoofing in address bar using RTL characters
#CVE-2023-37206: Insufficient validation of symlinks in the FileSystem API
#CVE-2023-37207: Fullscreen notification obscured
#CVE-2023-37208: Lack of warning when opening Diagcab files
#CVE-2023-37209: Use-after-free in `NotifyOnHistoryReload`
#CVE-2023-37210: Full-screen mode exit prevention
#CVE-2023-37211: Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
 and Thunderbird 102.13
#CVE-2023-37212: Memory safety bugs fixed in Firefox 115


To generate a diff of this commit:
cvs rdiff -u -r1.560 -r1.561 pkgsrc/www/firefox/Makefile
cvs rdiff -u -r1.499 -r1.500 pkgsrc/www/firefox/distinfo
cvs rdiff -u -r1.256 -r1.257 pkgsrc/www/firefox/mozilla-common.mk
cvs rdiff -u -r1.7 -r1.8 pkgsrc/www/firefox/files/node-wrapper.sh
cvs rdiff -u -r1.11 -r1.12 \
    pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk
cvs rdiff -u -r1.1 -r1.2 \
    pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build
cvs rdiff -u -r1.5 -r1.6 \
    pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/firefox/Makefile
diff -u pkgsrc/www/firefox/Makefile:1.560 pkgsrc/www/firefox/Makefile:1.561
--- pkgsrc/www/firefox/Makefile:1.560   Mon Jun 26 13:56:13 2023
+++ pkgsrc/www/firefox/Makefile Fri Jul  7 13:47:09 2023
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.560 2023/06/26 13:56:13 ryoon Exp $
+# $NetBSD: Makefile,v 1.561 2023/07/07 13:47:09 ryoon Exp $
 
 FIREFOX_VER=           ${MOZ_BRANCH}${MOZ_BRANCH_MINOR}
-MOZ_BRANCH=            114.0
-MOZ_BRANCH_MINOR=      .2
+MOZ_BRANCH=            115.0
+MOZ_BRANCH_MINOR=      
 
 DISTNAME=      firefox-${FIREFOX_VER}.source
 PKGNAME=       ${DISTNAME:S/.source//:S/b/beta/:S/esr//}

Index: pkgsrc/www/firefox/distinfo
diff -u pkgsrc/www/firefox/distinfo:1.499 pkgsrc/www/firefox/distinfo:1.500
--- pkgsrc/www/firefox/distinfo:1.499   Mon Jun 26 13:56:13 2023
+++ pkgsrc/www/firefox/distinfo Fri Jul  7 13:47:09 2023
@@ -1,15 +1,15 @@
-$NetBSD: distinfo,v 1.499 2023/06/26 13:56:13 ryoon Exp $
+$NetBSD: distinfo,v 1.500 2023/07/07 13:47:09 ryoon Exp $
 
-BLAKE2s (firefox-114.0.2.source.tar.xz) = 27bdba663d137e53f2318f9d96784cae71cc79086a12214b78bfdb4a9d4ace44
-SHA512 (firefox-114.0.2.source.tar.xz) = 1d514d09c6b964b96c6d52d54b89a89a92d53a6fe669e16a6370346c980db4d0ac6c502fa89219c71b680566b9eb982e9b3191c21f81d7326f34f6c837c0a872
-Size (firefox-114.0.2.source.tar.xz) = 505974216 bytes
+BLAKE2s (firefox-115.0.source.tar.xz) = bc81c58d9b86a48565a4b9f2a69873d4e9c4e7acd50c25de69b55d5b21ff2333
+SHA512 (firefox-115.0.source.tar.xz) = ed5d150e4dfdc01026beb3ae502a0b04321dd130084fdef63afce79a8a7a4898741d08f77716ba720c24f31b9c732c00ad0f1cd408b35b5eb6601a10014fb1a2
+Size (firefox-115.0.source.tar.xz) = 505151516 bytes
 BLAKE2s (nodejs-output-113.0.2.tgz) = da79ce7a5ab44378ac326caaa496dc5592bfb645b24b09f11c241933dc8ebb86
 SHA512 (nodejs-output-113.0.2.tgz) = 83c7f21ec8bd1af66aa7ffa4d0ab442c41946f470918100ae50c7792182ed94afc588161a5142cdfbc71b85049beb3c660fce22444fca736a326810cfd8c1d4b
 Size (nodejs-output-113.0.2.tgz) = 216297 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = 3b01cf7e37ea39bdd358fb14de5ce382b945ae39
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
-SHA1 (patch-config_makefiles_rust.mk) = 38c613cd87a9c3f868179caaab6e8a029eafd65f
+SHA1 (patch-config_makefiles_rust.mk) = 788ab8fed45625bc5552c56a3ab05b5ed7d49a8f
 SHA1 (patch-dom_base_nsAttrName.h) = ac7ba441a3b27df2855cf2673eea36b1cb44ad49
 SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414
 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
@@ -35,7 +35,7 @@ SHA1 (patch-third__party_libwebrtc_modul
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 8848fb05c1e8b45234f74db71602a8a84c0404a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
 SHA1 (patch-third__party_libwebrtc_system__wrappers_source_cpu__features__linux.cc) = b90e22b50879f7adcc1da3a993f52c0701b720f8
-SHA1 (patch-third__party_sqlite3_src_moz.build) = 2786a1f1d173e3774d89b5cdb0fd8f3148e47324
+SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
 SHA1 (patch-third__party_wasm2c_wasm2c_wasm-rt-impl.c) = cd5fd67f53d7a448cc9075a3756e2a03d4f43e4b
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
@@ -43,6 +43,6 @@ SHA1 (patch-toolkit_modules_subprocess_s
 SHA1 (patch-toolkit_moz.configure) = c183f8b1566ffed0df17bf856f693b3a288affeb
 SHA1 (patch-toolkit_mozapps_installer_packager.mk) = 706635b76a7b525794aba95e95544f09e18bb662
 SHA1 (patch-toolkit_xre_glxtest.cpp) = adcd5b05fcbd7b41c01a2aa66f3e8f05ed230444
-SHA1 (patch-widget_gtk_DMABufSurface.cpp) = b07836c49c0c9c85e7923d3297ad674453165522
+SHA1 (patch-widget_gtk_DMABufSurface.cpp) = 7d1d2d7770e563c7b912e24444254ae2791710ea
 SHA1 (patch-xpcom_base_nscore.h) = 1ac4d34d3c9e80bc1ac966c6c84cb320bc0fa1ec
 SHA1 (patch-xpcom_reflect_xptcall_md_unix_moz.build) = 81d43a046fcef6bf6717d52485686ba8e8738254

Index: pkgsrc/www/firefox/mozilla-common.mk
diff -u pkgsrc/www/firefox/mozilla-common.mk:1.256 pkgsrc/www/firefox/mozilla-common.mk:1.257
--- pkgsrc/www/firefox/mozilla-common.mk:1.256  Wed Jun 14 16:22:18 2023
+++ pkgsrc/www/firefox/mozilla-common.mk        Fri Jul  7 13:47:09 2023
@@ -1,4 +1,4 @@
-# $NetBSD: mozilla-common.mk,v 1.256 2023/06/14 16:22:18 ryoon Exp $
+# $NetBSD: mozilla-common.mk,v 1.257 2023/07/07 13:47:09 ryoon Exp $
 #
 # common Makefile fragment for mozilla packages based on gecko 2.0.
 #
@@ -91,8 +91,7 @@ CONFIGURE_ARGS+=      --disable-tests
 # Mozilla Bug 1432751
 #CONFIGURE_ARGS+=      --enable-system-cairo
 CONFIGURE_ARGS+=       --enable-system-pixman
-# webrtc option requires internal libvpx
-#CONFIGURE_ARGS+=      --with-system-libvpx
+CONFIGURE_ARGS+=       --with-system-libvpx
 CONFIGURE_ARGS+=       --enable-system-ffi
 CONFIGURE_ARGS+=       --with-system-icu
 CONFIGURE_ARGS+=       --with-system-nss
@@ -228,7 +227,7 @@ BUILDLINK_API_DEPENDS.libevent+=    libeven
 BUILDLINK_API_DEPENDS.nspr+=   nspr>=4.34
 .include "../../devel/nspr/buildlink3.mk"
 .include "../../textproc/icu/buildlink3.mk"
-BUILDLINK_API_DEPENDS.nss+=    nss>=3.89
+BUILDLINK_API_DEPENDS.nss+=    nss>=3.90
 .include "../../devel/nss/buildlink3.mk"
 .include "../../devel/zlib/buildlink3.mk"
 #.include "../../mk/jpeg.buildlink3.mk"
@@ -241,9 +240,8 @@ BUILDLINK_DEPMETHOD.clang=  build
 .include "../../lang/clang/buildlink3.mk"
 RUST_REQ=      1.65.0
 .include "../../lang/rust/rust.mk"
-# webrtc option requires internal libvpx
-#BUILDLINK_API_DEPENDS.libvpx+=        libvpx>=1.3.0
-#.include "../../multimedia/libvpx/buildlink3.mk"
+BUILDLINK_API_DEPENDS.libvpx+= libvpx>=1.13.0
+.include "../../multimedia/libvpx/buildlink3.mk"
 .include "../../net/libIDL/buildlink3.mk"
 # TODO: check again, pkgsrc has hunspell 1.7
 # was: textproc/hunspell 1.3 is too old

Index: pkgsrc/www/firefox/files/node-wrapper.sh
diff -u pkgsrc/www/firefox/files/node-wrapper.sh:1.7 pkgsrc/www/firefox/files/node-wrapper.sh:1.8
--- pkgsrc/www/firefox/files/node-wrapper.sh:1.7        Sun Jun  4 09:26:35 2023
+++ pkgsrc/www/firefox/files/node-wrapper.sh    Fri Jul  7 13:47:10 2023
@@ -1,6 +1,6 @@
 #! /bin/sh
 
-VERS=v20.2.0
+VERS=v20.3.1
 
 if [ "$1" = "-v" ] || [ "$1" = "--version" ]; then
        printf "${VERS}\n"

Index: pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk
diff -u pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk:1.11 pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk:1.12
--- pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk:1.11      Sun Jun  4 09:26:35 2023
+++ pkgsrc/www/firefox/patches/patch-config_makefiles_rust.mk   Fri Jul  7 13:47:10 2023
@@ -1,4 +1,4 @@
-$NetBSD: patch-config_makefiles_rust.mk,v 1.11 2023/06/04 09:26:35 ryoon Exp $
+$NetBSD: patch-config_makefiles_rust.mk,v 1.12 2023/07/07 13:47:10 ryoon Exp $
 
 NetBSD doesn't get along with parallel rust builds (it causes issues
 with ld.so) which are the default. Force -j1.
@@ -6,9 +6,9 @@ with ld.so) which are the default. Force
 Use less memory to fix build under NetBSD/i386.
 From: https://bugzilla.mozilla.org/show_bug.cgi?id=1644409
 
---- config/makefiles/rust.mk.orig      2022-06-08 14:10:19.000000000 +0000
+--- config/makefiles/rust.mk.orig      2023-06-22 21:19:03.000000000 +0000
 +++ config/makefiles/rust.mk
-@@ -58,6 +58,9 @@ ifdef MOZ_TSAN
+@@ -60,6 +60,9 @@ ifdef MOZ_TSAN
  cargo_build_flags += -Zbuild-std=std,panic_abort
  RUSTFLAGS += -Zsanitizer=thread
  endif
@@ -18,13 +18,12 @@ From: https://bugzilla.mozilla.org/show_
  
  rustflags_sancov =
  ifdef LIBFUZZER
-@@ -90,7 +93,8 @@ ifndef rustflags_sancov
+@@ -92,7 +95,7 @@ ifndef rustflags_sancov
  # Never enable when coverage is enabled to work around https://github.com/rust-lang/rust/issues/90045.
  ifndef MOZ_CODE_COVERAGE
  ifeq (,$(findstring gkrust_gtest,$(RUST_LIBRARY_FILE)))
--cargo_rustc_flags += -Clto
-+cargo_rustc_flags += -Clto=thin
-+export CARGO_PROFILE_RELEASE_LTO=thin
+-cargo_rustc_flags += -Clto$(if $(filter full,$(MOZ_LTO_RUST_CROSS)),=fat)
++cargo_rustc_flags += -Clto$(if $(filter full,$(MOZ_LTO_RUST_CROSS)),=thin)
  endif
  # We need -Cembed-bitcode=yes for all crates when using -Clto.
  RUSTFLAGS += -Cembed-bitcode=yes

Index: pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build
diff -u pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build:1.1 pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build:1.2
--- pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build:1.1     Wed Jun 14 16:22:18 2023
+++ pkgsrc/www/firefox/patches/patch-third__party_sqlite3_src_moz.build Fri Jul  7 13:47:10 2023
@@ -1,13 +1,15 @@
-$NetBSD: patch-third__party_sqlite3_src_moz.build,v 1.1 2023/06/14 16:22:18 ryoon Exp $
+$NetBSD: patch-third__party_sqlite3_src_moz.build,v 1.2 2023/07/07 13:47:10 ryoon Exp $
 
 * Fix segfault under NetBSD/i386 9 and pkgsrc/lang/gcc8-8.5.0
   For NetBSD/i386 9, @SQLITE3OPTFLAG@ will be replaced with "'-O0',".
 
---- third_party/sqlite3/src/moz.build.orig     2023-06-08 22:35:48.000000000 +0000
+--- third_party/sqlite3/src/moz.build.orig     2023-06-22 21:19:22.000000000 +0000
 +++ third_party/sqlite3/src/moz.build
-@@ -106,4 +106,5 @@ if CONFIG['CC_TYPE'] in ('clang', 'gcc')
+@@ -108,6 +108,7 @@ if CONFIG['CC_TYPE'] in ('clang', 'gcc')
      CFLAGS += [
          '-Wno-sign-compare',
          '-Wno-type-limits',
 +        @SQLITE3OPTFLAG@
      ]
+ 
+ # Set a default journal size limit. Note an hot journal can grow over this

Index: pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp
diff -u pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp:1.5 pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp:1.6
--- pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp:1.5   Tue Apr 18 14:00:11 2023
+++ pkgsrc/www/firefox/patches/patch-widget_gtk_DMABufSurface.cpp       Fri Jul  7 13:47:10 2023
@@ -1,8 +1,8 @@
-$NetBSD: patch-widget_gtk_DMABufSurface.cpp,v 1.5 2023/04/18 14:00:11 ryoon Exp $
+$NetBSD: patch-widget_gtk_DMABufSurface.cpp,v 1.6 2023/07/07 13:47:10 ryoon Exp $
 
 No eventfd on NetBSD 9 and older, fix build
 
---- widget/gtk/DMABufSurface.cpp.orig  2023-03-30 21:16:10.000000000 +0000
+--- widget/gtk/DMABufSurface.cpp.orig  2023-06-22 21:19:23.000000000 +0000
 +++ widget/gtk/DMABufSurface.cpp
 @@ -6,6 +6,9 @@
  
@@ -24,15 +24,15 @@ No eventfd on NetBSD 9 and older, fix bu
  #include <poll.h>
  #include <sys/ioctl.h>
  
-@@ -134,6 +139,7 @@ void DMABufSurface::GlobalRefAdd() {
+@@ -147,6 +152,7 @@ void DMABufSurface::GlobalRefAdd() {
  }
  
  void DMABufSurface::GlobalRefCountCreate() {
 +#if !(defined(__NetBSD__) && (__NetBSD_Version__ - 0 < 1000000000))
-   MOZ_ASSERT(!mGlobalRefCountFd);
+   LOGDMABUFREF(("DMABufSurface::GlobalRefCountCreate UID %d", mUID));
+   MOZ_DIAGNOSTIC_ASSERT(!mGlobalRefCountFd);
    // Create global ref count initialized to 0,
-   // i.e. is not referenced after create.
-@@ -145,6 +151,7 @@ void DMABufSurface::GlobalRefCountCreate
+@@ -159,6 +165,7 @@ void DMABufSurface::GlobalRefCountCreate
      mGlobalRefCountFd = 0;
      return;
    }

Prev by Date: CVS commit: pkgsrc/net/rabbitmq
Next by Date: CVS commit: pkgsrc/textproc/py-parse_type
Previous by Thread: CVS commit: pkgsrc/net/rabbitmq
Next by Thread: CVS commit: pkgsrc/textproc/py-parse_type
Indexes:

Home | Main Index | Thread Index | Old Index